# CVEs published 2026-08-25

766 CVEs were published on August 25, 2026: 96 critical, 288 high. Days are UTC.

- [CVE-2026-57171](https://cve.now/CVE-2026-57171.md): Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345) (CVSS 7.7, oscal-compass compliance-trestle · compliance-trestle)
- [CVE-2026-80202](https://cve.now/CVE-2026-80202.md): Kimai before 2.56.0 Authorization Bypass via TimesheetVoter (CVSS 9.3, kimai · kimai/kimai)
- [CVE-2026-80201](https://cve.now/CVE-2026-80201.md): Kimai before 2.53.0 API Token Leakage via Invoice Template (CVSS 2.0, kimai · kimai/kimai)
- [CVE-2026-80200](https://cve.now/CVE-2026-80200.md): Kimai before 2.53.0 Open Redirect via RelayState (CVSS 5.3, kimai · kimai/kimai)
- [CVE-2026-80199](https://cve.now/CVE-2026-80199.md): Kimai before 2.54.0 Username Enumeration via Timing Oracle (CVSS 6.3, kimai · kimai/kimai)
- [CVE-2026-80198](https://cve.now/CVE-2026-80198.md): Kimai before 2.56.0 Information Disclosure via config() Twig Function (CVSS 8.7, kimai · kimai/kimai)
- [CVE-2026-80197](https://cve.now/CVE-2026-80197.md): Kimai before 2.57.0 Improper Authorization via Favorite Endpoints (CVSS 8.7, kimai · kimai/kimai)
- [CVE-2026-80196](https://cve.now/CVE-2026-80196.md): Kimai before 2.58.0 Authentication Bypass via Password Reset Link (CVSS 8.7, kimai · kimai/kimai)
- [CVE-2026-80195](https://cve.now/CVE-2026-80195.md): Kimai before 2.63.0 Team Membership Removal via API (CVSS 8.7, kimai)
- [CVE-2026-80194](https://cve.now/CVE-2026-80194.md): Kimai before 2.64.0 Missing Authorization via ProjectViewController export (CVSS 8.7, kimai)
- [CVE-2026-80193](https://cve.now/CVE-2026-80193.md): Kimai before 2.62.0 Authorization Bypass via QuickEntry (CVSS 8.7, kimai)
- [CVE-2026-80192](https://cve.now/CVE-2026-80192.md): better-auth SSO before 1.6.27 Domain Ownership Authentication Bypass (CVSS 8.6, better-auth sso)
- [CVE-2026-80191](https://cve.now/CVE-2026-80191.md): GROWI before 8.0.2 Missing Authorization on Attachment Retrieval for Unauthenticated Requests (CVSS 8.7, GROWI)
- [CVE-2026-80189](https://cve.now/CVE-2026-80189.md): LeafWiki 0.10.0 through 0.12.0 Uncontrolled Resource Consumption via Unbounded ZIP Extraction (CVSS 7.1, perber leafwiki)
- [CVE-2026-57170](https://cve.now/CVE-2026-57170.md): Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439) (CVSS 7.8, oscal-compass compliance-trestle · compliance-trestle)
- [CVE-2026-52776](https://cve.now/CVE-2026-52776.md): Trestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0 (CVSS 8.6, oscal-compass compliance-trestle · compliance-trestle)
- [CVE-2026-54757](https://cve.now/CVE-2026-54757.md): Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data (CVSS 7.8, oscal-compass compliance-trestle · compliance-trestle)
- [CVE-2026-44476](https://cve.now/CVE-2026-44476.md): Doorkeeper OpenID Connect: Dynamic Client Registration feature creates public clients with client\_secret (CVSS 6.3, doorkeeper-gem doorkeeper-openid\_connect · doorkeeper-openi…)
- [CVE-2026-41707](https://cve.now/CVE-2026-41707.md): Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay (CVSS 7.4, Spring Security)
- [CVE-2026-79912](https://cve.now/CVE-2026-79912.md): TOTOLINK N600R cstecgi.cgi getCurrentTime command injection (CVSS 6.9, TOTOLINK N600R)
- [CVE-2026-15916](https://cve.now/CVE-2026-15916.md): Drupal core - Moderately critical - Information disclosure - SA-CORE-2026-010 (CVSS 4.2, Drupal core · drupal/core)
- [CVE-2026-15917](https://cve.now/CVE-2026-15917.md): Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011 (CVSS 4.7, Drupal core · drupal/core)
- [CVE-2026-55805](https://cve.now/CVE-2026-55805.md): Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012 (CVSS 5.4, Drupal core · drupal/core)
- [CVE-2026-16638](https://cve.now/CVE-2026-16638.md): Media Folders - Moderately critical - Cross site scripting - SA-CONTRIB-2026-080 (CVSS 6.1, Drupal Media Folders · drupal/media\_folders)
- [CVE-2026-16639](https://cve.now/CVE-2026-16639.md): Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081 (CVSS 9.8, Drupal Internationalization Single Sign-On · drupal/i18n\_sso)
- [CVE-2026-16640](https://cve.now/CVE-2026-16640.md): Search API Autocomplete - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-082 (CVSS 6.1, Drupal Search API Autocomplete · drupal/search\_api\_autocomp…)
- [CVE-2026-16646](https://cve.now/CVE-2026-16646.md): PanKM - Critical - Unsupported - SA-CONTRIB-2026-083 (CVSS 5.7, Drupal PanKM)
- [CVE-2026-16641](https://cve.now/CVE-2026-16641.md): Commerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-084 (CVSS 9.8, Drupal Commerce Elavon · drupal/commerce\_elavon)
- [CVE-2026-16642](https://cve.now/CVE-2026-16642.md): Email Login OTP - Critical - Unsupported - SA-CONTRIB-2026-085 (CVSS 5.7, Drupal Email Login OTP · drupal/email\_login\_otp)
- [CVE-2026-16643](https://cve.now/CVE-2026-16643.md): Lunr exposed filters - Critical - Unsupported - SA-CONTRIB-2026-086 (CVSS 5.7, Drupal Lunr exposed filters · drupal/lunr\_filters)
- [CVE-2026-16644](https://cve.now/CVE-2026-16644.md): Webform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087 (CVSS 9.1, Drupal Webform REST · drupal/webform\_rest)
- [CVE-2026-16645](https://cve.now/CVE-2026-16645.md): PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Access bypass - SA-CONTRIB-2026-088 (CVSS 9.1, Drupal PhotoSwipe - Responsive JavaScript Modal Image Galle…)
- [CVE-2026-15088](https://cve.now/CVE-2026-15088.md): Development Environment - Critical - Unsupported - SA-CONTRIB-2026-089 (CVSS 5.7, Drupal Development Environment · drupal/development\_environ…)
- [CVE-2026-18259](https://cve.now/CVE-2026-18259.md): Token Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090 (CVSS 7.5, Drupal Token Content Access · drupal/tca)
- [CVE-2026-18260](https://cve.now/CVE-2026-18260.md): Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-110 (CVSS 5.7, Drupal Disable Login Page · drupal/disable\_login)
- [CVE-2026-18261](https://cve.now/CVE-2026-18261.md): Powerful Surveys - Critical - Unsupported - SA-CONTRIB-2026-092 (CVSS 5.7, Drupal Powerful Surveys)
- [CVE-2026-18985](https://cve.now/CVE-2026-18985.md): Edit in-place field - Moderately critical - Access bypass - SA-CONTRIB-2026-093 (CVSS 8.1, Drupal Edit in-place field · drupal/edit\_in\_place\_field)
- [CVE-2026-79911](https://cve.now/CVE-2026-79911.md): TOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based overflow (CVSS 10.0, TOTOLINK N600R)
- [CVE-2026-80138](https://cve.now/CVE-2026-80138.md): ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php\_cli\_filepath Parameter (CVSS 9.2, MacWarrior clipbucket-v5)
- [CVE-2026-70665](https://cve.now/CVE-2026-70665.md): Doorkeeper OpenID Connect: DCR endpoint persists unvalidated client-supplied scopes (CVSS 4.2, doorkeeper-gem doorkeeper-openid\_connect)
- [CVE-2026-63403](https://cve.now/CVE-2026-63403.md): Faktory: Unrecovered panic in command handlers allows full-server denial of service (CVSS 8.7, contribsys faktory)
- [CVE-2026-73180](https://cve.now/CVE-2026-73180.md): Apache Tomcat: Authenticated WebSocket session survives end of HTTP session (CVSS 6.8, Apache Software Foundation Apache Tomcat)
- [CVE-2026-63404](https://cve.now/CVE-2026-63404.md): Faktory: Insecure predictable /tmp/redis.conf enables local Redis config hijack (network exposure / root RCE primitive) (CVSS 7.3, contribsys faktory)
- [CVE-2026-68763](https://cve.now/CVE-2026-68763.md): Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset (CVSS 7.5, Apache Software Foundation Apache Tomcat)
- [CVE-2026-79845](https://cve.now/CVE-2026-79845.md): code-projects Simple Inventory System edit.php sql injection (CVSS 6.9, code-projects Simple Inventory System)
- [CVE-2026-68569](https://cve.now/CVE-2026-68569.md): Apache Tomcat: Principal lookup can fail open in some cases (CVSS 8.1, Apache Software Foundation Apache Tomcat)
- [CVE-2026-80185](https://cve.now/CVE-2026-80185.md): Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root (CVSS 5.7, Red Hat Enterprise Linux)
- [CVE-2026-80186](https://cve.now/CVE-2026-80186.md): Bluez: stack overflow in name2utf8 causes dos and potential code execution (CVSS 7.6, Red Hat Enterprise Linux)
- [CVE-2026-68525](https://cve.now/CVE-2026-68525.md): Apache Tomcat: Redirect after FORM auth may bypass method specific constraints (CVSS 9.1, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2026-66422](https://cve.now/CVE-2026-66422.md): Apache Tomcat: Servlet role references can bypass declarative role constraints (CVSS 8.1, Apache Software Foundation Apache Tomcat)
- [CVE-2026-65927](https://cve.now/CVE-2026-65927.md): Apache Tomcat: RewriteValve \[N\] restarts at the second rule and may bypass access control (CVSS 7.5, Apache Software Foundation Apache Tomcat)
- [CVE-2026-62865](https://cve.now/CVE-2026-62865.md): TypeBot: Arbitrary server file read via Send Email block attachment path (CVSS 8.7, baptisteArno typebot.io)
- [CVE-2026-65905](https://cve.now/CVE-2026-65905.md): Apache Tomcat: Limited replay attack possible with DIGEST authentication (CVSS 9.8, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2026-65637](https://cve.now/CVE-2026-65637.md): Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete (CVSS 9.8, Apache Software Foundation Apache Tomcat · org.apache.to… +1)
- [CVE-2026-62861](https://cve.now/CVE-2026-62861.md): TypeBot: Cross-tenant custom-domain removal via unbound \`name\` in handleDeleteCustomDomain (CVSS 6.4, baptisteArno typebot.io)
- [CVE-2026-65183](https://cve.now/CVE-2026-65183.md): Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets (CVSS 8.1, Apache Software Foundation Apache Tomcat)
- [CVE-2026-65182](https://cve.now/CVE-2026-65182.md): Apache Tomcat: Bypass longest prefix security constraint (CVSS 9.1, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2026-62862](https://cve.now/CVE-2026-62862.md): TypeBot: Account takeover via brute-forceable 6-digit magic-link code (CVSS 9.1, baptisteArno typebot.io)
- [CVE-2026-79804](https://cve.now/CVE-2026-79804.md): SililaWijesinghe Food Ordering System search.php sql injection (CVSS 6.9, SililaWijesinghe Food Ordering System)
- [CVE-2026-80184](https://cve.now/CVE-2026-80184.md): In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms (OAuth1 access tokens, application credentials, (CVSS 7.6, OpenStack Keystone)
- [CVE-2026-78655](https://cve.now/CVE-2026-78655.md): Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session (CVSS 9.1, Punk-TOTP)
- [CVE-2026-78619](https://cve.now/CVE-2026-78619.md): Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp\_use\_recovery compares user identifiers numerically (CVSS 9.8, Punk-TOTP)
- [CVE-2026-80182](https://cve.now/CVE-2026-80182.md): In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped authentication could c (CVSS 7.6, OpenStack Keystone)
- [CVE-2026-32637](https://cve.now/CVE-2026-32637.md): Velero vulnerable to file path traversal when extracting from backup's tarball (CVSS 5.9, velero-io velero · github.com/vmware-tanzu/velero)
- [CVE-2026-72924](https://cve.now/CVE-2026-72924.md): GitHub CLI: \`gh codespace ports forward\` exposes forwarded services on all network interfaces by default (CVSS 2.1, cli)
- [CVE-2026-79793](https://cve.now/CVE-2026-79793.md): code-projects Online Shopping System sumit\_form.php cross site scripting (CVSS 5.3, code-projects Online Shopping System)
- [CVE-2026-77357](https://cve.now/CVE-2026-77357.md): Mesop: DoS in /hot-reload endpoint allows unauthenticated attacker to exhaust worker threads and crash the server (CVSS 8.7, mesop-dev mesop)
- [CVE-2026-53965](https://cve.now/CVE-2026-53965.md): MCP PHP SDK: Unbounded SSE buffer in HttpTransport enables client-side denial of service (CVSS 6.9, modelcontextprotocol php-sdk · mcp/sdk)
- [CVE-2026-80101](https://cve.now/CVE-2026-80101.md): Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation (CVSS 4.4, GNOME GIMP · Red Hat Enterprise Linux)
- [CVE-2026-77680](https://cve.now/CVE-2026-77680.md): Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fix (CVSS 5.3, Red Hat Enterprise Linux)
- [CVE-2026-55588](https://cve.now/CVE-2026-55588.md): ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption (CVSS 6.5, oras-project oras · oras.land/oras)
- [CVE-2026-79792](https://cve.now/CVE-2026-79792.md): zackees transcribe-anything Yt-dlp Download ytldp\_download.py ytdlp\_download os command injection (CVSS 6.3, zackees transcribe-anything)
- [CVE-2026-80104](https://cve.now/CVE-2026-80104.md): DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename (CVSS 9.3, eosphoros-ai DB-GPT)
- [CVE-2026-65105](https://cve.now/CVE-2026-65105.md): NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service w (CVSS 8.1, NVIDIA NemoClaw)
- [CVE-2026-65088](https://cve.now/CVE-2026-65088.md): NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive information. (CVSS 5.5, NVIDIA NemoClaw)
- [CVE-2026-65087](https://cve.now/CVE-2026-65087.md): NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . (CVSS 5.6, NVIDIA NemoClaw · uff)
- [CVE-2026-65086](https://cve.now/CVE-2026-65086.md): NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. (CVSS 6.8, NVIDIA OpenShell)
- [CVE-2026-65085](https://cve.now/CVE-2026-65085.md): NVIDIA OpenShell for Linux contains a vulnerability in its inference proxy, where an attacker could cause an improper encoding or escaping o (CVSS 5.2, NVIDIA OpenShell)
- [CVE-2026-65084](https://cve.now/CVE-2026-65084.md): NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper certificate validation. (CVSS 8.1, NVIDIA NemoClaw)
- [CVE-2026-65083](https://cve.now/CVE-2026-65083.md): NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of dis (CVSS 9.9, NVIDIA OpenShell)
- [CVE-2026-65082](https://cve.now/CVE-2026-65082.md): NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could cause code injection. (CVSS 7.0, NVIDIA NemoClaw)
- [CVE-2026-65081](https://cve.now/CVE-2026-65081.md): NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. (CVSS 8.1, NVIDIA NemoClaw)
- [CVE-2026-65089](https://cve.now/CVE-2026-65089.md): NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS command injectio (CVSS 7.8, NVIDIA NemoClaw)
- [CVE-2026-65090](https://cve.now/CVE-2026-65090.md): NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause OS command injection. (CVSS 7.8, NVIDIA NemoClaw)
- [CVE-2026-65099](https://cve.now/CVE-2026-65099.md): NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. (CVSS 7.8, NVIDIA NemoClaw)
- [CVE-2026-65098](https://cve.now/CVE-2026-65098.md): NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. (CVSS 8.1, NVIDIA NemoClaw)
- [CVE-2026-65097](https://cve.now/CVE-2026-65097.md): NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without int (CVSS 7.5, NVIDIA NemoClaw)
- [CVE-2026-65096](https://cve.now/CVE-2026-65096.md): NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection. (CVSS 7.8, NVIDIA NemoClaw)
- [CVE-2026-65093](https://cve.now/CVE-2026-65093.md): NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. (CVSS 9.9, NVIDIA OpenShell)
- [CVE-2026-65092](https://cve.now/CVE-2026-65092.md): NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. (CVSS 8.5, NVIDIA OpenShell)
- [CVE-2026-65091](https://cve.now/CVE-2026-65091.md): NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. (CVSS 8.8, NVIDIA OpenShell)
- [CVE-2026-78964](https://cve.now/CVE-2026-78964.md): Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code out (CVSS 9.6, Google Chrome)
- [CVE-2026-78914](https://cve.now/CVE-2026-78914.md): Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandb (CVSS 6.5, Google Chrome)
- [CVE-2026-79254](https://cve.now/CVE-2026-79254.md): Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass syste (CVSS 4.3, Google Chrome)
- [CVE-2026-79260](https://cve.now/CVE-2026-79260.md): Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proc (CVSS 6.5, Google Chrome)
- [CVE-2026-79253](https://cve.now/CVE-2026-79253.md): Improper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engin (CVSS 6.5, Google Chrome)
- [CVE-2026-78915](https://cve.now/CVE-2026-78915.md): Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbit (CVSS 7.5, Google Chrome)
- [CVE-2026-79126](https://cve.now/CVE-2026-79126.md): Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker t (CVSS 5.9, Google Chrome)
- [CVE-2026-78957](https://cve.now/CVE-2026-78957.md): Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a (CVSS 5.5, Google Chrome)
- [CVE-2026-78981](https://cve.now/CVE-2026-78981.md): Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to potentially obtain sensitive inform (CVSS 6.5, Google Chrome)
- [CVE-2026-79152](https://cve.now/CVE-2026-79152.md): Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin po (CVSS 9.8, Google Chrome)
- [CVE-2026-79179](https://cve.now/CVE-2026-79179.md): Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information v (CVSS 6.5, Google Chrome)
- [CVE-2026-79133](https://cve.now/CVE-2026-79133.md): Incorrect authorization in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a cra (CVSS 6.5, Google Chrome)
- [CVE-2026-79021](https://cve.now/CVE-2026-79021.md): Missing authorization in InterestGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer p (CVSS 6.5, Google Chrome)
- [CVE-2026-79225](https://cve.now/CVE-2026-79225.md): Incorrect authorization in Browser in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social enginee (CVSS 4.3, Google Chrome)
- [CVE-2026-79105](https://cve.now/CVE-2026-79105.md): Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access rest (CVSS 4.3, Google Chrome)
- [CVE-2026-79017](https://cve.now/CVE-2026-79017.md): Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a cr (CVSS 6.5, Google Chrome)
- [CVE-2026-79207](https://cve.now/CVE-2026-79207.md): Information leak in Passwords in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via (CVSS 6.5, Google Chrome)
- [CVE-2026-79125](https://cve.now/CVE-2026-79125.md): Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML (CVSS 6.5, Google Chrome)
- [CVE-2026-79148](https://cve.now/CVE-2026-79148.md): Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially (CVSS 9.1, Google Chrome)
- [CVE-2026-79197](https://cve.now/CVE-2026-79197.md): Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-79045](https://cve.now/CVE-2026-79045.md): Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory inside t (CVSS 8.8, Google Chrome)
- [CVE-2026-79223](https://cve.now/CVE-2026-79223.md): Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a craft (CVSS 8.8, Google Chrome)
- [CVE-2026-79246](https://cve.now/CVE-2026-79246.md): Information leak in DataTransfer in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a cra (CVSS 6.5, Google Chrome)
- [CVE-2026-79112](https://cve.now/CVE-2026-79112.md): Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to rea (CVSS 6.5, Google Chrome)
- [CVE-2026-79244](https://cve.now/CVE-2026-79244.md): Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox v (CVSS 8.8, Google Chrome)
- [CVE-2026-78947](https://cve.now/CVE-2026-78947.md): Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web (CVSS 6.5, Google Chrome)
- [CVE-2026-78980](https://cve.now/CVE-2026-78980.md): Improper input validation in ReaderMode in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to b (CVSS 4.3, Google Chrome)
- [CVE-2026-79018](https://cve.now/CVE-2026-79018.md): Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a cra (CVSS 6.5, Google Chrome)
- [CVE-2026-79056](https://cve.now/CVE-2026-79056.md): Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outs (CVSS 9.6, Google Chrome)
- [CVE-2026-79108](https://cve.now/CVE-2026-79108.md): UI misrepresentation in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leve (CVSS 6.5, Google Chrome)
- [CVE-2026-79015](https://cve.now/CVE-2026-79015.md): Improper input validation in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restric (CVSS 4.3, Google Chrome)
- [CVE-2026-79239](https://cve.now/CVE-2026-79239.md): Out of bounds read in Tint in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside (CVSS 6.5, Google Chrome)
- [CVE-2026-78956](https://cve.now/CVE-2026-78956.md): Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary co (CVSS 8.8, Google Chrome)
- [CVE-2026-79177](https://cve.now/CVE-2026-79177.md): Incorrect authorization in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the ren (CVSS 6.5, Google Chrome)
- [CVE-2026-79060](https://cve.now/CVE-2026-79060.md): Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the render (CVSS 6.5, Google Chrome)
- [CVE-2026-79009](https://cve.now/CVE-2026-79009.md): UI misrepresentation in UI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI eleme (CVSS 4.3, Google Chrome)
- [CVE-2026-79058](https://cve.now/CVE-2026-79058.md): Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proces (CVSS 9.1, Google Chrome)
- [CVE-2026-78896](https://cve.now/CVE-2026-78896.md): Information leak in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a cra (CVSS 4.3, Google Chrome)
- [CVE-2026-79284](https://cve.now/CVE-2026-79284.md): UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer pr (CVSS 4.3, Google Chrome)
- [CVE-2026-79041](https://cve.now/CVE-2026-79041.md): Missing authorization in Browser in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering t (CVSS 4.3, Google Chrome)
- [CVE-2026-78968](https://cve.now/CVE-2026-78968.md): Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to (CVSS 6.5, Google Chrome)
- [CVE-2026-78946](https://cve.now/CVE-2026-78946.md): Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafte (CVSS 4.3, Google Chrome)
- [CVE-2026-79090](https://cve.now/CVE-2026-79090.md): Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to by (CVSS 9.8, Google Chrome)
- [CVE-2026-79005](https://cve.now/CVE-2026-79005.md): Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the render (CVSS 6.5, Google Chrome)
- [CVE-2026-79123](https://cve.now/CVE-2026-79123.md): Improper input validation in NTP Footer in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised (CVSS 6.5, Google Chrome)
- [CVE-2026-79243](https://cve.now/CVE-2026-79243.md): Improper input validation in ReadingList in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised (CVSS 6.5, Google Chrome)
- [CVE-2026-79273](https://cve.now/CVE-2026-79273.md): Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially byp (CVSS 4.3, Google Chrome)
- [CVE-2026-79040](https://cve.now/CVE-2026-79040.md): Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the san (CVSS 4.3, Google Chrome)
- [CVE-2026-78977](https://cve.now/CVE-2026-78977.md): Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory ins (CVSS 6.5, Google Chrome)
- [CVE-2026-79261](https://cve.now/CVE-2026-79261.md): Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a craf (CVSS 4.3, Google Chrome)
- [CVE-2026-79233](https://cve.now/CVE-2026-79233.md): UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via (CVSS 4.3, Google Chrome)
- [CVE-2026-79022](https://cve.now/CVE-2026-79022.md): UI misrepresentation in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineerin (CVSS 4.3, Google Chrome)
- [CVE-2026-79098](https://cve.now/CVE-2026-79098.md): UI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to (CVSS 4.3, Google Chrome)
- [CVE-2026-79147](https://cve.now/CVE-2026-79147.md): Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to poten (CVSS 5.3, Google Chrome)
- [CVE-2026-79089](https://cve.now/CVE-2026-79089.md): Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social en (CVSS 5.3, Google Chrome)
- [CVE-2026-79119](https://cve.now/CVE-2026-79119.md): Use after free in PDF in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome)
- [CVE-2026-78897](https://cve.now/CVE-2026-78897.md): Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtai (CVSS 6.5, Google Chrome)
- [CVE-2026-79206](https://cve.now/CVE-2026-79206.md): Out of bounds read in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read mem (CVSS 6.5, Google Chrome)
- [CVE-2026-79190](https://cve.now/CVE-2026-79190.md): Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer pro (CVSS 4.3, Google Chrome)
- [CVE-2026-79181](https://cve.now/CVE-2026-79181.md): Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a craft (CVSS 5.3, Google Chrome)
- [CVE-2026-78979](https://cve.now/CVE-2026-78979.md): Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypa (CVSS 4.3, Google Chrome)
- [CVE-2026-79000](https://cve.now/CVE-2026-79000.md): Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging soci (CVSS 4.3, Google Chrome)
- [CVE-2026-79196](https://cve.now/CVE-2026-79196.md): Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitiv (CVSS 5.3, Google Chrome)
- [CVE-2026-78950](https://cve.now/CVE-2026-78950.md): Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside th (CVSS 8.8, Google Chrome)
- [CVE-2026-79077](https://cve.now/CVE-2026-79077.md): Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions (CVSS 4.3, Google Chrome)
- [CVE-2026-79001](https://cve.now/CVE-2026-79001.md): Information leak in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer p (CVSS 5.3, Google Chrome)
- [CVE-2026-79289](https://cve.now/CVE-2026-79289.md): Improper control of a resource through its lifetime in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had com (CVSS 3.1, Google Chrome)
- [CVE-2026-79184](https://cve.now/CVE-2026-79184.md): Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process (CVSS 4.3, Google Chrome)
- [CVE-2026-79124](https://cve.now/CVE-2026-79124.md): Information leak in Intents in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information vi (CVSS 6.5, Google Chrome)
- [CVE-2026-79263](https://cve.now/CVE-2026-79263.md): Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.1, Google Chrome)
- [CVE-2026-79055](https://cve.now/CVE-2026-79055.md): Information leak in Sharing in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to (CVSS 5.1, Google Chrome)
- [CVE-2026-78974](https://cve.now/CVE-2026-78974.md): UI misrepresentation in Linux Toolkit Theming in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineerin (CVSS 5.4, Google Chrome)
- [CVE-2026-79141](https://cve.now/CVE-2026-79141.md): Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a craft (CVSS 4.3, Google Chrome)
- [CVE-2026-79025](https://cve.now/CVE-2026-79025.md): Improper input validation in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proc (CVSS 4.2, Google Chrome)
- [CVE-2026-79266](https://cve.now/CVE-2026-79266.md): Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitr (CVSS 8.8, Google Chrome)
- [CVE-2026-79073](https://cve.now/CVE-2026-79073.md): Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code (CVSS 8.8, Google Chrome)
- [CVE-2026-79185](https://cve.now/CVE-2026-79185.md): Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML pag (CVSS 4.3, Google Chrome)
- [CVE-2026-79182](https://cve.now/CVE-2026-79182.md): Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code o (CVSS 8.8, Google Chrome)
- [CVE-2026-79004](https://cve.now/CVE-2026-79004.md): Out of bounds read in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to re (CVSS 3.4, Google Chrome)
- [CVE-2026-78963](https://cve.now/CVE-2026-78963.md): Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code o (CVSS 8.8, Google Chrome)
- [CVE-2026-78984](https://cve.now/CVE-2026-78984.md): Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to (CVSS 3.4, Google Chrome)
- [CVE-2026-78960](https://cve.now/CVE-2026-78960.md): Information leak in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cro (CVSS 6.5, Google Chrome)
- [CVE-2026-79075](https://cve.now/CVE-2026-79075.md): Information leak in Geolocation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain se (CVSS 6.5, Google Chrome)
- [CVE-2026-79034](https://cve.now/CVE-2026-79034.md): Information leak in CORS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak (CVSS 3.1, Google Chrome)
- [CVE-2026-79221](https://cve.now/CVE-2026-79221.md): Uninitialized resource in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandb (CVSS 6.5, Google Chrome)
- [CVE-2026-79139](https://cve.now/CVE-2026-79139.md): Improper input validation in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the r (CVSS 7.5, Google Chrome)
- [CVE-2026-79033](https://cve.now/CVE-2026-79033.md): Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social enginee (CVSS 8.8, Google Chrome)
- [CVE-2026-79203](https://cve.now/CVE-2026-79203.md): Improper input validation in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer pro (CVSS 3.1, Google Chrome)
- [CVE-2026-79227](https://cve.now/CVE-2026-79227.md): Type confusion in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitr (CVSS 8.8, Google Chrome)
- [CVE-2026-79097](https://cve.now/CVE-2026-79097.md): Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-78901](https://cve.now/CVE-2026-78901.md): Race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr (CVSS 7.5, Google Chrome)
- [CVE-2026-78962](https://cve.now/CVE-2026-78962.md): Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potential (CVSS 4.3, Google Chrome)
- [CVE-2026-79252](https://cve.now/CVE-2026-79252.md): Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafte (CVSS 4.3, Google Chrome)
- [CVE-2026-79211](https://cve.now/CVE-2026-79211.md): Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass sys (CVSS 4.3, Google Chrome)
- [CVE-2026-79258](https://cve.now/CVE-2026-79258.md): Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain c (CVSS 6.5, Google Chrome)
- [CVE-2026-78913](https://cve.now/CVE-2026-78913.md): Use after free in Chromoting in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside (CVSS 8.1, Google Chrome)
- [CVE-2026-79265](https://cve.now/CVE-2026-79265.md): Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proces (CVSS 5.3, Google Chrome)
- [CVE-2026-79091](https://cve.now/CVE-2026-79091.md): Use after free in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to exe (CVSS 9.6, Google Chrome)
- [CVE-2026-79249](https://cve.now/CVE-2026-79249.md): Code injection in Bisection in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted (CVSS 6.5, Google Chrome)
- [CVE-2026-78951](https://cve.now/CVE-2026-78951.md): Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sand (CVSS 9.6, Google Chrome)
- [CVE-2026-79220](https://cve.now/CVE-2026-79220.md): Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to ob (CVSS 5.3, Google Chrome)
- [CVE-2026-79003](https://cve.now/CVE-2026-79003.md): Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass (CVSS 4.3, Google Chrome)
- [CVE-2026-79064](https://cve.now/CVE-2026-79064.md): Use after free in Network in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execu (CVSS 9.6, Google Chrome)
- [CVE-2026-79134](https://cve.now/CVE-2026-79134.md): Incorrect authorization in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information vi (CVSS 6.5, Google Chrome)
- [CVE-2026-79085](https://cve.now/CVE-2026-79085.md): Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process (CVSS 4.3, Google Chrome)
- [CVE-2026-79269](https://cve.now/CVE-2026-79269.md): Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy vi (CVSS 4.3, Google Chrome)
- [CVE-2026-79068](https://cve.now/CVE-2026-79068.md): Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin (CVSS 4.3, Google Chrome)
- [CVE-2026-79230](https://cve.now/CVE-2026-79230.md): Improper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitr (CVSS 8.8, Google Chrome)
- [CVE-2026-79154](https://cve.now/CVE-2026-79154.md): Missing authorization in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain (CVSS 6.5, Google Chrome)
- [CVE-2026-79103](https://cve.now/CVE-2026-79103.md): Incorrect reference resolution in Speech in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer (CVSS 3.1, Google Chrome)
- [CVE-2026-78978](https://cve.now/CVE-2026-78978.md): Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary (CVSS 8.8, Google Chrome)
- [CVE-2026-79245](https://cve.now/CVE-2026-79245.md): Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had compromised the renderer process to execute ar (CVSS 7.7, Google Chrome)
- [CVE-2026-79059](https://cve.now/CVE-2026-79059.md): Information leak in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to ob (CVSS 3.1, Google Chrome)
- [CVE-2026-79178](https://cve.now/CVE-2026-79178.md): Incorrect authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 152.0.7977.65 allowed a remote attacker t (CVSS 4.3, Google Chrome)
- [CVE-2026-78944](https://cve.now/CVE-2026-78944.md): Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitr (CVSS 8.8, Google Chrome)
- [CVE-2026-79083](https://cve.now/CVE-2026-79083.md): Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised t (CVSS 7.5, Google Chrome)
- [CVE-2026-78983](https://cve.now/CVE-2026-78983.md): Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execut (CVSS 8.3, Google Chrome)
- [CVE-2026-79234](https://cve.now/CVE-2026-79234.md): Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted (CVSS 6.5, Google Chrome)
- [CVE-2026-78959](https://cve.now/CVE-2026-78959.md): Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engi (CVSS 6.5, Google Chrome)
- [CVE-2026-78903](https://cve.now/CVE-2026-78903.md): Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proce (CVSS 3.1, Google Chrome)
- [CVE-2026-79205](https://cve.now/CVE-2026-79205.md): Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a craft (CVSS 4.3, Google Chrome)
- [CVE-2026-79070](https://cve.now/CVE-2026-79070.md): Incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a (CVSS 4.3, Google Chrome)
- [CVE-2026-78892](https://cve.now/CVE-2026-78892.md): Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a local attacker to bypass system access (CVSS 7.1, Google Chrome)
- [CVE-2026-79283](https://cve.now/CVE-2026-79283.md): UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML p (CVSS 5.4, Google Chrome)
- [CVE-2026-79291](https://cve.now/CVE-2026-79291.md): Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML (CVSS 6.5, Google Chrome)
- [CVE-2026-78949](https://cve.now/CVE-2026-78949.md): Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin d (CVSS 2.9, Google Chrome)
- [CVE-2026-79238](https://cve.now/CVE-2026-79238.md): Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to (CVSS 4.3, Google Chrome)
- [CVE-2026-79146](https://cve.now/CVE-2026-79146.md): Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data vi (CVSS 5.5, Google Chrome)
- [CVE-2026-79023](https://cve.now/CVE-2026-79023.md): Incorrect authorization in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a c (CVSS 6.5, Google Chrome)
- [CVE-2026-79293](https://cve.now/CVE-2026-79293.md): Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafte (CVSS 6.5, Google Chrome)
- [CVE-2026-79180](https://cve.now/CVE-2026-79180.md): UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social enginee (CVSS 5.4, Google Chrome)
- [CVE-2026-79242](https://cve.now/CVE-2026-79242.md): Observable discrepancy in HTML in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a craft (CVSS 5.3, Google Chrome)
- [CVE-2026-79193](https://cve.now/CVE-2026-79193.md): Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML pa (CVSS 4.3, Google Chrome)
- [CVE-2026-79024](https://cve.now/CVE-2026-79024.md): Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a cr (CVSS 6.5, Google Chrome)
- [CVE-2026-79099](https://cve.now/CVE-2026-79099.md): Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via (CVSS 6.5, Google Chrome)
- [CVE-2026-79191](https://cve.now/CVE-2026-79191.md): Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer (CVSS 3.1, Google Chrome)
- [CVE-2026-79276](https://cve.now/CVE-2026-79276.md): Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering (CVSS 4.3, Google Chrome)
- [CVE-2026-78976](https://cve.now/CVE-2026-78976.md): Improper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the rend (CVSS 4.3, Google Chrome)
- [CVE-2026-79173](https://cve.now/CVE-2026-79173.md): UI misrepresentation in WebAppInstalls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted (CVSS 5.4, Google Chrome)
- [CVE-2026-79094](https://cve.now/CVE-2026-79094.md): Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a craft (CVSS 6.5, Google Chrome)
- [CVE-2026-79287](https://cve.now/CVE-2026-79287.md): Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a craf (CVSS 5.3, Google Chrome)
- [CVE-2026-78975](https://cve.now/CVE-2026-78975.md): Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a craft (CVSS 6.5, Google Chrome)
- [CVE-2026-79008](https://cve.now/CVE-2026-79008.md): Improper input validation in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the ren (CVSS 8.3, Google Chrome)
- [CVE-2026-79050](https://cve.now/CVE-2026-79050.md): Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions vi (CVSS 4.3, Google Chrome)
- [CVE-2026-78905](https://cve.now/CVE-2026-78905.md): Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the (CVSS 8.8, Google Chrome)
- [CVE-2026-78936](https://cve.now/CVE-2026-78936.md): Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin d (CVSS 2.9, Google Chrome)
- [CVE-2026-79151](https://cve.now/CVE-2026-79151.md): Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrict (CVSS 4.3, Google Chrome)
- [CVE-2026-79127](https://cve.now/CVE-2026-79127.md): Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-79272](https://cve.now/CVE-2026-79272.md): Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer p (CVSS 3.1, Google Chrome)
- [CVE-2026-79002](https://cve.now/CVE-2026-79002.md): Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer (CVSS 3.1, Google Chrome)
- [CVE-2026-79229](https://cve.now/CVE-2026-79229.md): Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process t (CVSS 6.5, Google Chrome)
- [CVE-2026-78953](https://cve.now/CVE-2026-78953.md): Missing authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer pr (CVSS 3.1, Google Chrome)
- [CVE-2026-79228](https://cve.now/CVE-2026-79228.md): Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer (CVSS 3.1, Google Chrome)
- [CVE-2026-79214](https://cve.now/CVE-2026-79214.md): Improper input validation in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proc (CVSS 4.3, Google Chrome)
- [CVE-2026-78967](https://cve.now/CVE-2026-78967.md): Missing authorization in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process (CVSS 6.5, Google Chrome)
- [CVE-2026-79241](https://cve.now/CVE-2026-79241.md): Out of bounds read in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox (CVSS 6.5, Google Chrome)
- [CVE-2026-79143](https://cve.now/CVE-2026-79143.md): Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to byp (CVSS 4.3, Google Chrome)
- [CVE-2026-78955](https://cve.now/CVE-2026-78955.md): Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-orig (CVSS 6.5, Google Chrome)
- [CVE-2026-78912](https://cve.now/CVE-2026-78912.md): UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML pa (CVSS 5.4, Google Chrome)
- [CVE-2026-79204](https://cve.now/CVE-2026-79204.md): UI misrepresentation in Input in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted (CVSS 5.4, Google Chrome)
- [CVE-2026-79217](https://cve.now/CVE-2026-79217.md): Incorrect authorization in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restri (CVSS 4.3, Google Chrome)
- [CVE-2026-79020](https://cve.now/CVE-2026-79020.md): Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox v (CVSS 8.1, Google Chrome)
- [CVE-2026-79250](https://cve.now/CVE-2026-79250.md): UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML (CVSS 5.4, Google Chrome)
- [CVE-2026-78906](https://cve.now/CVE-2026-78906.md): Race condition in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the (CVSS 7.5, Google Chrome)
- [CVE-2026-79285](https://cve.now/CVE-2026-79285.md): Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data (CVSS 6.5, Google Chrome)
- [CVE-2026-79053](https://cve.now/CVE-2026-79053.md): Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proce (CVSS 3.1, Google Chrome)
- [CVE-2026-79051](https://cve.now/CVE-2026-79051.md): Incorrect authorization in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafte (CVSS 4.3, Google Chrome)
- [CVE-2026-79201](https://cve.now/CVE-2026-79201.md): Improper access control in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a craft (CVSS 4.3, Google Chrome)
- [CVE-2026-79132](https://cve.now/CVE-2026-79132.md): Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the r (CVSS 8.3, Google Chrome)
- [CVE-2026-79049](https://cve.now/CVE-2026-79049.md): Incorrect reference resolution in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restri (CVSS 4.3, Google Chrome)
- [CVE-2026-79215](https://cve.now/CVE-2026-79215.md): Integer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside th (CVSS 8.8, Google Chrome)
- [CVE-2026-79074](https://cve.now/CVE-2026-79074.md): Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to ob (CVSS 5.3, Google Chrome)
- [CVE-2026-79013](https://cve.now/CVE-2026-79013.md): Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via craf (CVSS 5.9, Google Chrome)
- [CVE-2026-79199](https://cve.now/CVE-2026-79199.md): Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions vi (CVSS 4.3, Google Chrome)
- [CVE-2026-79122](https://cve.now/CVE-2026-79122.md): Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted net (CVSS 5.9, Google Chrome)
- [CVE-2026-79042](https://cve.now/CVE-2026-79042.md): Missing authorization in Payments in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineer (CVSS 4.3, Google Chrome)
- [CVE-2026-79226](https://cve.now/CVE-2026-79226.md): Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social e (CVSS 8.8, Google Chrome)
- [CVE-2026-79251](https://cve.now/CVE-2026-79251.md): Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin poli (CVSS 4.3, Google Chrome)
- [CVE-2026-79208](https://cve.now/CVE-2026-79208.md): Missing authorization in HTTP2 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via crafted n (CVSS 5.9, Google Chrome)
- [CVE-2026-79259](https://cve.now/CVE-2026-79259.md): Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrict (CVSS 4.3, Google Chrome)
- [CVE-2026-78943](https://cve.now/CVE-2026-78943.md): Improper input validation in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proc (CVSS 3.1, Google Chrome)
- [CVE-2026-79213](https://cve.now/CVE-2026-79213.md): Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system a (CVSS 4.3, Google Chrome)
- [CVE-2026-79067](https://cve.now/CVE-2026-79067.md): Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process (CVSS 4.3, Google Chrome)
- [CVE-2026-79270](https://cve.now/CVE-2026-79270.md): Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a c (CVSS 6.5, Google Chrome)
- [CVE-2026-79120](https://cve.now/CVE-2026-79120.md): Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data vi (CVSS 6.5, Google Chrome)
- [CVE-2026-79107](https://cve.now/CVE-2026-79107.md): Incorrect authorization in TabGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive informa (CVSS 6.5, Google Chrome)
- [CVE-2026-78940](https://cve.now/CVE-2026-78940.md): Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a craft (CVSS 4.3, Google Chrome)
- [CVE-2026-79038](https://cve.now/CVE-2026-79038.md): Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via (CVSS 6.5, Google Chrome)
- [CVE-2026-79086](https://cve.now/CVE-2026-79086.md): Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain sensitive infor (CVSS 5.1, Google Chrome)
- [CVE-2026-79255](https://cve.now/CVE-2026-79255.md): Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proce (CVSS 3.1, Google Chrome)
- [CVE-2026-79066](https://cve.now/CVE-2026-79066.md): Improper input validation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer p (CVSS 3.1, Google Chrome)
- [CVE-2026-78910](https://cve.now/CVE-2026-78910.md): Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome)
- [CVE-2026-79264](https://cve.now/CVE-2026-79264.md): Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via (CVSS 4.3, Google Chrome)
- [CVE-2026-78894](https://cve.now/CVE-2026-78894.md): Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to lea (CVSS 3.1, Google Chrome)
- [CVE-2026-79057](https://cve.now/CVE-2026-79057.md): Race condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to pote (CVSS 8.1, Google Chrome)
- [CVE-2026-79137](https://cve.now/CVE-2026-79137.md): Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to byp (CVSS 4.3, Google Chrome)
- [CVE-2026-78969](https://cve.now/CVE-2026-78969.md): Uninitialized resource in Video in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a cr (CVSS 6.5, Google Chrome)
- [CVE-2026-79231](https://cve.now/CVE-2026-79231.md): Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-79087](https://cve.now/CVE-2026-79087.md): Injection in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass system access restrictions (CVSS 4.3, Google Chrome)
- [CVE-2026-78907](https://cve.now/CVE-2026-78907.md): Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a (CVSS 6.5, Google Chrome)
- [CVE-2026-79136](https://cve.now/CVE-2026-79136.md): Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a (CVSS 4.3, Google Chrome)
- [CVE-2026-79110](https://cve.now/CVE-2026-79110.md): Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted (CVSS 4.3, Google Chrome)
- [CVE-2026-79031](https://cve.now/CVE-2026-79031.md): Improper resource exposure in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass site isolation via a craft (CVSS 3.1, Google Chrome)
- [CVE-2026-78891](https://cve.now/CVE-2026-78891.md): Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-79248](https://cve.now/CVE-2026-79248.md): Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process (CVSS 4.3, Google Chrome)
- [CVE-2026-78991](https://cve.now/CVE-2026-78991.md): Race condition in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to o (CVSS 5.3, Google Chrome)
- [CVE-2026-79084](https://cve.now/CVE-2026-79084.md): Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging s (CVSS 4.3, Google Chrome)
- [CVE-2026-79095](https://cve.now/CVE-2026-79095.md): Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTM (CVSS 4.3, Google Chrome)
- [CVE-2026-79006](https://cve.now/CVE-2026-79006.md): Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy (CVSS 4.3, Google Chrome)
- [CVE-2026-79116](https://cve.now/CVE-2026-79116.md): Missing authorization in Viz in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to b (CVSS 4.3, Google Chrome)
- [CVE-2026-78942](https://cve.now/CVE-2026-78942.md): Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via c (CVSS 4.3, Google Chrome)
- [CVE-2026-79128](https://cve.now/CVE-2026-79128.md): Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sa (CVSS 9.6, Google Chrome)
- [CVE-2026-79140](https://cve.now/CVE-2026-79140.md): Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sa (CVSS 9.6, Google Chrome)
- [CVE-2026-79192](https://cve.now/CVE-2026-79192.md): Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin p (CVSS 4.3, Google Chrome)
- [CVE-2026-79065](https://cve.now/CVE-2026-79065.md): Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proc (CVSS 4.3, Google Chrome)
- [CVE-2026-79144](https://cve.now/CVE-2026-79144.md): Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML pa (CVSS 4.3, Google Chrome)
- [CVE-2026-79271](https://cve.now/CVE-2026-79271.md): Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive (CVSS 6.5, Google Chrome)
- [CVE-2026-78909](https://cve.now/CVE-2026-78909.md): Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary (CVSS 9.6, Google Chrome)
- [CVE-2026-78990](https://cve.now/CVE-2026-78990.md): Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-78987](https://cve.now/CVE-2026-78987.md): Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML (CVSS 4.3, Google Chrome)
- [CVE-2026-78937](https://cve.now/CVE-2026-78937.md): Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to po (CVSS 9.6, Google Chrome)
- [CVE-2026-79129](https://cve.now/CVE-2026-79129.md): Use after free in Sessions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to (CVSS 9.6, Google Chrome)
- [CVE-2026-79046](https://cve.now/CVE-2026-79046.md): Race condition in Permissions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering (CVSS 4.3, Google Chrome)
- [CVE-2026-79210](https://cve.now/CVE-2026-79210.md): Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer pro (CVSS 8.3, Google Chrome)
- [CVE-2026-79028](https://cve.now/CVE-2026-79028.md): Observable discrepancy in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a cr (CVSS 5.3, Google Chrome)
- [CVE-2026-78985](https://cve.now/CVE-2026-78985.md): Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering (CVSS 9.6, Google Chrome)
- [CVE-2026-78898](https://cve.now/CVE-2026-78898.md): Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypa (CVSS 5.4, Google Chrome)
- [CVE-2026-79237](https://cve.now/CVE-2026-79237.md): Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a cr (CVSS 4.3, Google Chrome)
- [CVE-2026-79256](https://cve.now/CVE-2026-79256.md): Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromis (CVSS 8.3, Google Chrome)
- [CVE-2026-79109](https://cve.now/CVE-2026-79109.md): Improper input validation in Printing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer pro (CVSS 8.3, Google Chrome)
- [CVE-2026-79032](https://cve.now/CVE-2026-79032.md): Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proc (CVSS 6.8, Google Chrome)
- [CVE-2026-78941](https://cve.now/CVE-2026-78941.md): Information leak in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypas (CVSS 3.1, Google Chrome)
- [CVE-2026-78999](https://cve.now/CVE-2026-78999.md): Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the render (CVSS 8.3, Google Chrome)
- [CVE-2026-78945](https://cve.now/CVE-2026-78945.md): Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execu (CVSS 9.6, Google Chrome)
- [CVE-2026-79286](https://cve.now/CVE-2026-79286.md): Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to potentially execute ar (CVSS 7.4, Google Chrome)
- [CVE-2026-79010](https://cve.now/CVE-2026-79010.md): Operation on a resource after expiration or release in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had com (CVSS 4.3, Google Chrome)
- [CVE-2026-79016](https://cve.now/CVE-2026-79016.md): Observable discrepancy in SVG in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HT (CVSS 4.3, Google Chrome)
- [CVE-2026-79267](https://cve.now/CVE-2026-79267.md): Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypa (CVSS 4.3, Google Chrome)
- [CVE-2026-79186](https://cve.now/CVE-2026-79186.md): Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proces (CVSS 3.1, Google Chrome)
- [CVE-2026-78966](https://cve.now/CVE-2026-78966.md): Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a (CVSS 4.3, Google Chrome)
- [CVE-2026-79176](https://cve.now/CVE-2026-79176.md): UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain (CVSS 6.5, Google Chrome)
- [CVE-2026-79106](https://cve.now/CVE-2026-79106.md): Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proces (CVSS 4.3, Google Chrome)
- [CVE-2026-79262](https://cve.now/CVE-2026-79262.md): Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a craft (CVSS 4.3, Google Chrome)
- [CVE-2026-78961](https://cve.now/CVE-2026-78961.md): Incorrect authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process a (CVSS 4.3, Google Chrome)
- [CVE-2026-78958](https://cve.now/CVE-2026-78958.md): Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to (CVSS 3.1, Google Chrome)
- [CVE-2026-79044](https://cve.now/CVE-2026-79044.md): Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised (CVSS 5.3, Google Chrome)
- [CVE-2026-79104](https://cve.now/CVE-2026-79104.md): Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process t (CVSS 5.3, Google Chrome)
- [CVE-2026-79088](https://cve.now/CVE-2026-79088.md): Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to byp (CVSS 5.4, Google Chrome)
- [CVE-2026-79076](https://cve.now/CVE-2026-79076.md): Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via craf (CVSS 6.5, Google Chrome)
- [CVE-2026-79071](https://cve.now/CVE-2026-79071.md): Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentia (CVSS 8.3, Google Chrome)
- [CVE-2026-79222](https://cve.now/CVE-2026-79222.md): Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin po (CVSS 4.3, Google Chrome)
- [CVE-2026-78893](https://cve.now/CVE-2026-78893.md): Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML (CVSS 6.5, Google Chrome)
- [CVE-2026-79007](https://cve.now/CVE-2026-79007.md): Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to (CVSS 3.1, Google Chrome)
- [CVE-2026-79216](https://cve.now/CVE-2026-79216.md): Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execu (CVSS 7.5, Google Chrome)
- [CVE-2026-79030](https://cve.now/CVE-2026-79030.md): Observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a c (CVSS 5.3, Google Chrome)
- [CVE-2026-79209](https://cve.now/CVE-2026-79209.md): Type confusion in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside t (CVSS 8.8, Google Chrome)
- [CVE-2026-79078](https://cve.now/CVE-2026-79078.md): Use after free in FedCM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary (CVSS 9.6, Google Chrome)
- [CVE-2026-79236](https://cve.now/CVE-2026-79236.md): Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-78952](https://cve.now/CVE-2026-78952.md): Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the rend (CVSS 8.3, Google Chrome)
- [CVE-2026-78938](https://cve.now/CVE-2026-78938.md): Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-79274](https://cve.now/CVE-2026-79274.md): Information leak in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML pag (CVSS 4.3, Google Chrome)
- [CVE-2026-78954](https://cve.now/CVE-2026-78954.md): Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer pro (CVSS 4.3, Google Chrome)
- [CVE-2026-78899](https://cve.now/CVE-2026-78899.md): Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr (CVSS 8.8, Google Chrome)
- [CVE-2026-78904](https://cve.now/CVE-2026-78904.md): Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the (CVSS 9.6, Google Chrome)
- [CVE-2026-79027](https://cve.now/CVE-2026-79027.md): Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.1, Google Chrome)
- [CVE-2026-79026](https://cve.now/CVE-2026-79026.md): Use after free in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially (CVSS 9.6, Google Chrome)
- [CVE-2026-79138](https://cve.now/CVE-2026-79138.md): Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrar (CVSS 9.6, Google Chrome)
- [CVE-2026-79275](https://cve.now/CVE-2026-79275.md): Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via (CVSS 9.6, Google Chrome)
- [CVE-2026-79149](https://cve.now/CVE-2026-79149.md): Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via (CVSS 9.6, Google Chrome)
- [CVE-2026-79131](https://cve.now/CVE-2026-79131.md): Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox (CVSS 9.6, Google Chrome)
- [CVE-2026-79198](https://cve.now/CVE-2026-79198.md): Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox vi (CVSS 8.8, Google Chrome)
- [CVE-2026-79014](https://cve.now/CVE-2026-79014.md): Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to byp (CVSS 4.3, Google Chrome)
- [CVE-2026-79240](https://cve.now/CVE-2026-79240.md): Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrar (CVSS 8.8, Google Chrome)
- [CVE-2026-79048](https://cve.now/CVE-2026-79048.md): Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrar (CVSS 8.8, Google Chrome)
- [CVE-2026-79189](https://cve.now/CVE-2026-79189.md): Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside (CVSS 9.6, Google Chrome)
- [CVE-2026-79188](https://cve.now/CVE-2026-79188.md): Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside (CVSS 9.6, Google Chrome)
- [CVE-2026-78900](https://cve.now/CVE-2026-78900.md): Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code o (CVSS 9.6, Google Chrome)
- [CVE-2026-79174](https://cve.now/CVE-2026-79174.md): Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer pro (CVSS 4.3, Google Chrome)
- [CVE-2026-79118](https://cve.now/CVE-2026-79118.md): Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted (CVSS 4.3, Google Chrome)
- [CVE-2026-79232](https://cve.now/CVE-2026-79232.md): Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the s (CVSS 9.6, Google Chrome)
- [CVE-2026-79235](https://cve.now/CVE-2026-79235.md): Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via (CVSS 9.6, Google Chrome)
- [CVE-2026-79043](https://cve.now/CVE-2026-79043.md): Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside (CVSS 9.6, Google Chrome)
- [CVE-2026-78895](https://cve.now/CVE-2026-78895.md): Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML p (CVSS 4.3, Google Chrome)
- [CVE-2026-78908](https://cve.now/CVE-2026-78908.md): Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML (CVSS 4.3, Google Chrome)
- [CVE-2026-78948](https://cve.now/CVE-2026-78948.md): Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via (CVSS 9.6, Google Chrome)
- [CVE-2026-79142](https://cve.now/CVE-2026-79142.md): Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside t (CVSS 8.8, Google Chrome)
- [CVE-2026-79072](https://cve.now/CVE-2026-79072.md): Improper state validation in Performance in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside (CVSS 8.1, Google Chrome)
- [CVE-2026-79111](https://cve.now/CVE-2026-79111.md): Improper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code ou (CVSS 9.6, Google Chrome)
- [CVE-2026-79082](https://cve.now/CVE-2026-79082.md): Incorrect authorization in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the r (CVSS 4.3, Google Chrome)
- [CVE-2026-79117](https://cve.now/CVE-2026-79117.md): Race condition in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineeri (CVSS 4.3, Google Chrome)
- [CVE-2026-78965](https://cve.now/CVE-2026-78965.md): Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted (CVSS 4.3, Google Chrome)
- [CVE-2026-79130](https://cve.now/CVE-2026-79130.md): Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via (CVSS 9.6, Google Chrome)
- [CVE-2026-79288](https://cve.now/CVE-2026-79288.md): Improper input validation in Autofill in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive in (CVSS 6.5, Google Chrome)
- [CVE-2026-79187](https://cve.now/CVE-2026-79187.md): Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-79019](https://cve.now/CVE-2026-79019.md): Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrar (CVSS 9.6, Google Chrome)
- [CVE-2026-79093](https://cve.now/CVE-2026-79093.md): Incorrect authorization in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy v (CVSS 4.3, Google Chrome)
- [CVE-2026-79155](https://cve.now/CVE-2026-79155.md): Race condition in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to p (CVSS 8.3, Google Chrome)
- [CVE-2026-79183](https://cve.now/CVE-2026-79183.md): Use after free in Accessibility in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute a (CVSS 8.8, Google Chrome)
- [CVE-2026-79212](https://cve.now/CVE-2026-79212.md): Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proces (CVSS 4.3, Google Chrome)
- [CVE-2026-79202](https://cve.now/CVE-2026-79202.md): Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-79257](https://cve.now/CVE-2026-79257.md): Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via (CVSS 9.6, Google Chrome)
- [CVE-2026-78911](https://cve.now/CVE-2026-78911.md): Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process an (CVSS 8.3, Google Chrome)
- [CVE-2026-79011](https://cve.now/CVE-2026-79011.md): UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass sy (CVSS 8.1, Google Chrome)
- [CVE-2026-78934](https://cve.now/CVE-2026-78934.md): Race condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbit (CVSS 8.3, Google Chrome)
- [CVE-2026-79039](https://cve.now/CVE-2026-79039.md): Use after free in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the s (CVSS 8.1, Google Chrome)
- [CVE-2026-78986](https://cve.now/CVE-2026-78986.md): Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to (CVSS 3.1, Google Chrome)
- [CVE-2026-79292](https://cve.now/CVE-2026-79292.md): Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to (CVSS 8.3, Google Chrome)
- [CVE-2026-79047](https://cve.now/CVE-2026-79047.md): Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary (CVSS 9.6, Google Chrome)
- [CVE-2026-79219](https://cve.now/CVE-2026-79219.md): Use after free in Bluetooth in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbit (CVSS 8.8, Google Chrome)
- [CVE-2026-79247](https://cve.now/CVE-2026-79247.md): Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the rendere (CVSS 8.3, Google Chrome)
- [CVE-2026-79194](https://cve.now/CVE-2026-79194.md): Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outsi (CVSS 8.1, Google Chrome)
- [CVE-2026-78939](https://cve.now/CVE-2026-78939.md): Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to e (CVSS 9.6, Google Chrome)
- [CVE-2026-79195](https://cve.now/CVE-2026-79195.md): Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-79218](https://cve.now/CVE-2026-79218.md): Incorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proces (CVSS 8.3, Google Chrome)
- [CVE-2026-79175](https://cve.now/CVE-2026-79175.md): Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the rend (CVSS 8.3, Google Chrome)
- [CVE-2026-79069](https://cve.now/CVE-2026-79069.md): Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code (CVSS 8.8, Google Chrome)
- [CVE-2026-78989](https://cve.now/CVE-2026-78989.md): Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary (CVSS 9.6, Google Chrome)
- [CVE-2026-79200](https://cve.now/CVE-2026-79200.md): Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a (CVSS 9.6, Google Chrome)
- [CVE-2026-79012](https://cve.now/CVE-2026-79012.md): Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to (CVSS 9.6, Google Chrome)
- [CVE-2026-78935](https://cve.now/CVE-2026-78935.md): Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute a (CVSS 9.6, Google Chrome)
- [CVE-2026-79150](https://cve.now/CVE-2026-79150.md): Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sa (CVSS 9.6, Google Chrome)
- [CVE-2026-79052](https://cve.now/CVE-2026-79052.md): Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a (CVSS 9.6, Google Chrome)
- [CVE-2026-79224](https://cve.now/CVE-2026-79224.md): Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to e (CVSS 8.3, Google Chrome)
- [CVE-2026-79121](https://cve.now/CVE-2026-79121.md): Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer p (CVSS 8.3, Google Chrome)
- [CVE-2026-79054](https://cve.now/CVE-2026-79054.md): Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to e (CVSS 8.3, Google Chrome)
- [CVE-2026-79290](https://cve.now/CVE-2026-79290.md): Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a (CVSS 9.6, Google Chrome)
- [CVE-2026-79282](https://cve.now/CVE-2026-79282.md): Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside th (CVSS 9.6, Google Chrome)
- [CVE-2026-77585](https://cve.now/CVE-2026-77585.md): Improper Validation of SSH Target in Okta Privileged Access Client (CVSS 5.3, Okta Privileged Access Client)
- [CVE-2026-74932](https://cve.now/CVE-2026-74932.md): WP Fastest Cache 0.9.0.3 - 1.5.0 - Unauthenticated Stored XSS via Host Header Cache Poisoning (CVSS 7.5, WP Fastest Cache)
- [CVE-2026-66153](https://cve.now/CVE-2026-66153.md): The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to mani (CVSS 7.0, SonicWall NetExtender)
- [CVE-2026-66152](https://cve.now/CVE-2026-66152.md): A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file (CVSS 8.8, SonicWall NetExtender)
- [CVE-2026-59981](https://cve.now/CVE-2026-59981.md): OpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindow (CVSS 7.1, AcademySoftwareFoundation openexr)
- [CVE-2026-68514](https://cve.now/CVE-2026-68514.md): OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision in deep images (CVSS 5.5, AcademySoftwareFoundation openexr)
- [CVE-2026-68515](https://cve.now/CVE-2026-68515.md): OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union (CVSS 7.1, AcademySoftwareFoundation openexr)
- [CVE-2026-55099](https://cve.now/CVE-2026-55099.md): icalendar: Algorithmic Complexity in Equality (CVSS 7.5, collective icalendar · icalendar)
- [CVE-2026-65367](https://cve.now/CVE-2026-65367.md): A null pointer dereference was addressed with improved input validation. (CVSS 5.5, Apple iOS and iPadOS)
- [CVE-2026-64705](https://cve.now/CVE-2026-64705.md): A buffer overflow was addressed with improved bounds checking. (CVSS 5.5, Apple iOS and iPadOS · Apple macOS)
- [CVE-2026-43657](https://cve.now/CVE-2026-43657.md): A permissions issue was addressed with additional restrictions. (CVSS 3.3, Apple iOS and iPadOS)
- [CVE-2026-43670](https://cve.now/CVE-2026-43670.md): A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. (CVSS 8.8, Apple Safari · Apple iOS and iPadOS +1)
- [CVE-2026-45019](https://cve.now/CVE-2026-45019.md): Chainlit: SSRF via MCP SSE and streamable-http transports allows unauthenticated internal network access (CVSS 7.2, chainlit)
- [CVE-2026-45018](https://cve.now/CVE-2026-45018.md): Chainlit: Command injection via MCP stdio transport allows unauthenticated remote code execution (CVSS 9.8, chainlit)
- [CVE-2026-68513](https://cve.now/CVE-2026-68513.md): OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision (CVSS 7.1, AcademySoftwareFoundation openexr)
- [CVE-2026-78379](https://cve.now/CVE-2026-78379.md): Consent bypass in python\_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools (CVSS 9.2, Amazon strands-agents-tools)
- [CVE-2026-65979](https://cve.now/CVE-2026-65979.md): OpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN) (CVSS 6.7, AcademySoftwareFoundation openexr)
- [CVE-2026-55609](https://cve.now/CVE-2026-55609.md): sublinear-time-solver: Arbitrary file write in consciousness-explorer / sublinear-time-solver MCP export\_state (CVSS 7.1, ruvnet sublinear-time-solver · consciousness-explorer +1)
- [CVE-2026-62986](https://cve.now/CVE-2026-62986.md): OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure (CVSS 4.3, AcademySoftwareFoundation openexr)
- [CVE-2026-55620](https://cve.now/CVE-2026-55620.md): eml\_parser: DoS via deeply nested parens in Received headers (CVSS 7.5, GOVCERT-LU eml\_parser · eml-parser)
- [CVE-2026-55619](https://cve.now/CVE-2026-55619.md): eml\_parser: Parser DoS via deeply nested parentheses in e-mail headers (CVSS 5.3, GOVCERT-LU eml\_parser · eml-parser)
- [CVE-2026-80050](https://cve.now/CVE-2026-80050.md): ContiNew Admin through 4.1.0 Missing Authorization and File-Type Allowlist on Multipart Upload Endpoints (CVSS 7.1, continew-org continew-admin)
- [CVE-2026-80049](https://cve.now/CVE-2026-80049.md): Airbyte Platform through 2.0.0 Cross-Workspace Authorization Bypass via Caller-Supplied workspaceId (CVSS 8.7, airbytehq airbyte-platform)
- [CVE-2026-79788](https://cve.now/CVE-2026-79788.md): Dradis Community Edition 5.1.0 through 5.2.0 Server-Side Request Forgery via Unrestricted AI Provider Address (CVSS 7.1, dradis-ce)
- [CVE-2026-79787](https://cve.now/CVE-2026-79787.md): Alluxio through 2.9.5 S3 REST Proxy Authentication Bypass via Unverified Request Signature (CVSS 9.3, alluxio)
- [CVE-2026-79786](https://cve.now/CVE-2026-79786.md): Coroot 1.20.2 through 1.24.5 Unvalidated Redirect URI in MCP OAuth Client Registration (CVSS 7.0, coroot)
- [CVE-2026-55618](https://cve.now/CVE-2026-55618.md): eml\_parser: URL extraction bypass via HTML entities in URLs (CVSS 6.5, GOVCERT-LU eml\_parser · eml-parser)
- [CVE-2026-61555](https://cve.now/CVE-2026-61555.md): OpenEXR: Empty multiView viewFromChannelName file crash (CVSS 5.5, AcademySoftwareFoundation openexr)
- [CVE-2026-59985](https://cve.now/CVE-2026-59985.md): OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE decoding on ILP32 (CVSS 5.5, AcademySoftwareFoundation openexr)
- [CVE-2026-55663](https://cve.now/CVE-2026-55663.md): mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation) (CVSS 5.6, versatica mediasoup · mediasoup)
- [CVE-2026-59984](https://cve.now/CVE-2026-59984.md): OpenEXR: Scratch buffer overflow decoding B44-compressed InputFile on ILP32 (CVSS 5.5, AcademySoftwareFoundation openexr)
- [CVE-2026-55637](https://cve.now/CVE-2026-55637.md): genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport (CVSS 8.8, GeiserX genieacs-mcp · github.com/geiserx/genieacs-mcp)
- [CVE-2026-59983](https://cve.now/CVE-2026-59983.md): OpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP32 (CVSS 5.5, AcademySoftwareFoundation openexr)
- [CVE-2026-59982](https://cve.now/CVE-2026-59982.md): OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms (CVSS 7.1, AcademySoftwareFoundation openexr)
- [CVE-2026-75750](https://cve.now/CVE-2026-75750.md): Substance3D - Painter | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Substance3D - Painter)
- [CVE-2026-75767](https://cve.now/CVE-2026-75767.md): Substance3D - Painter | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Substance3D - Painter)
- [CVE-2026-75768](https://cve.now/CVE-2026-75768.md): Substance3D - Painter | Untrusted Search Path (CWE-426) (CVSS 7.8, Adobe Substance3D - Painter)
- [CVE-2026-75766](https://cve.now/CVE-2026-75766.md): Substance3D - Painter | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Substance3D - Painter)
- [CVE-2026-75769](https://cve.now/CVE-2026-75769.md): Substance3D - Painter | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Substance3D - Painter)
- [CVE-2026-75770](https://cve.now/CVE-2026-75770.md): Substance3D - Painter | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Painter)
- [CVE-2026-75752](https://cve.now/CVE-2026-75752.md): Substance3D - Painter | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance3D - Painter)
- [CVE-2026-75749](https://cve.now/CVE-2026-75749.md): Substance3D - Painter | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance3D - Painter)
- [CVE-2026-80051](https://cve.now/CVE-2026-80051.md): github.com/graphql-go/graphql (GraphQL for Go) through 0.8.1 does not validate that a scalar variable value matches its declared type. (CVSS 5.9, graphql-go project graphql-go)
- [CVE-2026-71399](https://cve.now/CVE-2026-71399.md): Adobe XD | Buffer Overflow (CWE-120) (CVSS 7.8, Adobe XD)
- [CVE-2026-71441](https://cve.now/CVE-2026-71441.md): Illustrator | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Illustrator Desktop)
- [CVE-2026-48425](https://cve.now/CVE-2026-48425.md): Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Substance 3D Sampler)
- [CVE-2026-48421](https://cve.now/CVE-2026-48421.md): Substance3D - Sampler | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Sampler)
- [CVE-2026-48423](https://cve.now/CVE-2026-48423.md): Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Substance 3D Sampler)
- [CVE-2026-48418](https://cve.now/CVE-2026-48418.md): Substance3D - Sampler | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Sampler)
- [CVE-2026-71382](https://cve.now/CVE-2026-71382.md): Substance3D - Sampler | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Sampler)
- [CVE-2026-48420](https://cve.now/CVE-2026-48420.md): Substance3D - Sampler | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Sampler)
- [CVE-2026-48422](https://cve.now/CVE-2026-48422.md): Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Substance 3D Sampler)
- [CVE-2026-48417](https://cve.now/CVE-2026-48417.md): Substance3D - Sampler | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8, Adobe Substance 3D Sampler)
- [CVE-2026-48424](https://cve.now/CVE-2026-48424.md): Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Substance 3D Sampler)
- [CVE-2026-48419](https://cve.now/CVE-2026-48419.md): Substance3D - Sampler | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Sampler)
- [CVE-2026-48429](https://cve.now/CVE-2026-48429.md): Substance3D - Designer | NULL Pointer Dereference (CWE-476) (CVSS 5.5, Adobe Substance 3D Designer)
- [CVE-2026-48432](https://cve.now/CVE-2026-48432.md): Substance3D - Designer | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Substance 3D Designer)
- [CVE-2026-48430](https://cve.now/CVE-2026-48430.md): Substance3D - Designer | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Substance 3D Designer)
- [CVE-2026-71564](https://cve.now/CVE-2026-71564.md): Substance3D - Designer | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Designer)
- [CVE-2026-48426](https://cve.now/CVE-2026-48426.md): Substance3D - Designer | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Designer)
- [CVE-2026-48428](https://cve.now/CVE-2026-48428.md): Substance3D - Designer | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Substance 3D Designer)
- [CVE-2026-48427](https://cve.now/CVE-2026-48427.md): Substance3D - Designer | Out-of-bounds Write (CWE-787) (CVSS 7.8, Adobe Substance 3D Designer)
- [CVE-2026-48431](https://cve.now/CVE-2026-48431.md): Substance3D - Designer | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Substance 3D Designer)
- [CVE-2026-48433](https://cve.now/CVE-2026-48433.md): Substance3D - Designer | Heap-based Buffer Overflow (CWE-122) (CVSS 7.8, Adobe Substance 3D Designer)
- [CVE-2026-55419](https://cve.now/CVE-2026-55419.md): Reachy Mini: Unrestricted Upload of File with Dangerous Type (CVSS 5.3, pollen-robotics reachy\_mini · reachy-mini)
- [CVE-2026-71443](https://cve.now/CVE-2026-71443.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 7.5, Adobe C2PA Tool · Adobe Content Credentials Rust SDK)
- [CVE-2026-76189](https://cve.now/CVE-2026-76189.md): CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191) (CVSS 6.2, Adobe C2PA Tool · Adobe Content Credentials Rust SDK)
- [CVE-2026-71442](https://cve.now/CVE-2026-71442.md): CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191) (CVSS 7.5, Adobe C2PA Tool · Adobe Content Credentials Rust SDK)
- [CVE-2026-71444](https://cve.now/CVE-2026-71444.md): CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191) (CVSS 6.2, Adobe C2PA Tool · Adobe Content Credentials Rust SDK)
- [CVE-2026-71360](https://cve.now/CVE-2026-71360.md): CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) (CVSS 7.5, Adobe C2PA Tool · Adobe Content Credentials Rust SDK)
- [CVE-2026-76198](https://cve.now/CVE-2026-76198.md): CAI Content Credentials | Improper Input Validation (CWE-20) (CVSS 5.5, Adobe C2PA Tool · Adobe Content Credentials Rust SDK)
- [CVE-2026-26211](https://cve.now/CVE-2026-26211.md): Ekushey Project Manager CRM 5.0 Stored XSS via System Name Field (CVSS 4.8, Creativeitem Ekushey Project Manager CRM)
- [CVE-2026-76195](https://cve.now/CVE-2026-76195.md): Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) (CVSS 10.0, Adobe Campaign Classic)
- [CVE-2026-76197](https://cve.now/CVE-2026-76197.md): Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) (CVSS 10.0, Adobe Campaign Classic)
- [CVE-2026-76193](https://cve.now/CVE-2026-76193.md): Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) (CVSS 10.0, Adobe Campaign Classic)
- [CVE-2026-79992](https://cve.now/CVE-2026-79992.md): Emacs: emacs: command injection via crafted filenames in tramp (CVSS 7.8, Red Hat Enterprise Linux)
- [CVE-2026-64204](https://cve.now/CVE-2026-64204.md): Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI (CVSS 7.8, NI LabVIEW)
- [CVE-2026-59189](https://cve.now/CVE-2026-59189.md): OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow origin (CVSS 7.1, AcademySoftwareFoundation openexr)
- [CVE-2026-64203](https://cve.now/CVE-2026-64203.md): Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI (CVSS 7.8, NI LabVIEW)
- [CVE-2026-64202](https://cve.now/CVE-2026-64202.md): Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI (CVSS 7.8, NI LabVIEW)
- [CVE-2026-64201](https://cve.now/CVE-2026-64201.md): Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI (CVSS 7.8, NI LabVIEW)
- [CVE-2026-59187](https://cve.now/CVE-2026-59187.md): OpenEXR: exrmetrics deep pixelmode heap buffer overflow (CVSS 7.1, AcademySoftwareFoundation openexr)
- [CVE-2026-75498](https://cve.now/CVE-2026-75498.md): Webkul QloApps SQL injection (CVSS 7.2, Webkul QloApps)
- [CVE-2026-75497](https://cve.now/CVE-2026-75497.md): Webkul QloApps SQL injection (CVSS 7.2, Webkul QloApps)
- [CVE-2026-16234](https://cve.now/CVE-2026-16234.md): Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI (CVSS 7.8, NI LabVIEW)
- [CVE-2026-75496](https://cve.now/CVE-2026-75496.md): Webkul QloApps improper file upload validation (CVSS 7.2, Webkul QloApps)
- [CVE-2026-59186](https://cve.now/CVE-2026-59186.md): OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds (CVSS 7.1, AcademySoftwareFoundation openexr)
- [CVE-2026-59184](https://cve.now/CVE-2026-59184.md): OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write (CVSS 7.1, AcademySoftwareFoundation openexr)
- [CVE-2026-16233](https://cve.now/CVE-2026-16233.md): Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI (CVSS 7.8, NI LabVIEW)
- [CVE-2026-55557](https://cve.now/CVE-2026-55557.md): browse-mcp: Arbitrary file write via unconfined download and state paths (CVSS 8.6, That1Drifter browse-mcp · browse-mcp)
- [CVE-2026-55585](https://cve.now/CVE-2026-55585.md): QWED: Authenticated Remote Code Execution via Unsafe SymPy \`parse\_expr()\` (CVSS 8.8, QWED-AI qwed-verification · qwed)
- [CVE-2026-19913](https://cve.now/CVE-2026-19913.md): CVE-2026-19913 (CVSS 7.5, Kaltura HTML5 Video Player, html5lib library)
- [CVE-2026-19912](https://cve.now/CVE-2026-19912.md): CVE-2026-19912 (CVSS 9.8, Kaltura HTML5 Video Player, html5 library)
- [CVE-2026-55553](https://cve.now/CVE-2026-55553.md): urllib: Cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage (CVSS 7.5, node-modules urllib · urllib)
- [CVE-2026-24166](https://cve.now/CVE-2026-24166.md): NVIDIA UFM Enterprise contains a vulnerability in the session management component, where an attacker could use a hard-coded cryptographic k (CVSS 5.1, NVIDIA Unified Fabric Manager Enterprise - GA · NVIDIA Unif…)
- [CVE-2026-24168](https://cve.now/CVE-2026-24168.md): NVIDIA UFM Enterprise contains a vulnerability in the IBDiagnet API where an authenticated attacker with administrative privileges may cause (CVSS 6.8, NVIDIA Unified Fabric Manager Enterprise - GA · NVIDIA Unif…)
- [CVE-2026-24167](https://cve.now/CVE-2026-24167.md): NVIDIA UFM Enterprise contains a vulnerability in the user management component, where an authenticated administrator could inject commands (CVSS 6.8, NVIDIA Unified Fabric Manager Enterprise - GA · NVIDIA Unif…)
- [CVE-2026-24169](https://cve.now/CVE-2026-24169.md): NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject co (CVSS 8.0, NVIDIA Unified Fabric Manager Enterprise - GA · NVIDIA Unif…)
- [CVE-2026-24170](https://cve.now/CVE-2026-24170.md): NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause imprope (CVSS 8.8, NVIDIA Unified Fabric Manager Enterprise - GA · NVIDIA Unif…)
- [CVE-2026-18445](https://cve.now/CVE-2026-18445.md): Integer Overflow Vulnerability Resulting in an Out of Bounds Write in NI LabVIEW (CVSS 6.6, NI LabVIEW)
- [CVE-2026-47624](https://cve.now/CVE-2026-47624.md): NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. (CVSS 6.0, NVIDIA DGX Spark)
- [CVE-2026-24225](https://cve.now/CVE-2026-24225.md): NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read. (CVSS 6.0, NVIDIA DGX Spark)
- [CVE-2026-24263](https://cve.now/CVE-2026-24263.md): NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer derefere (CVSS 8.2, NVIDIA DGX Spark)
- [CVE-2026-47626](https://cve.now/CVE-2026-47626.md): NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. (CVSS 8.2, NVIDIA DGX Spark)
- [CVE-2026-24262](https://cve.now/CVE-2026-24262.md): NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. (CVSS 8.2, NVIDIA DGX Spark)
- [CVE-2026-18444](https://cve.now/CVE-2026-18444.md): Integer Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEW (CVSS 6.6, NI LabVIEW)
- [CVE-2026-55571](https://cve.now/CVE-2026-55571.md): djust authentication bypass: a login\_required / on\_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls (CVSS 8.2, djust-org djust · djust)
- [CVE-2026-13478](https://cve.now/CVE-2026-13478.md): Out-of-bounds read in Zephyr ext2 block-bitmap validation from a crafted s\_blocks\_count (CVSS 5.5, zephyrproject zephyr)
- [CVE-2026-13217](https://cve.now/CVE-2026-13217.md): NULL-pointer dereference in Zephyr OCPP CALLRESULT parsing via unchecked strtok\_r/atoi (CVSS 5.9, zephyrproject zephyr)
- [CVE-2026-13216](https://cve.now/CVE-2026-13216.md): Out-of-bounds stack write in Zephyr virtio PCI driver from unvalidated device-supplied capability length (CVSS 6.1, zephyrproject zephyr)
- [CVE-2026-55640](https://cve.now/CVE-2026-55640.md): Nextcloud MCP Server: Unauthenticated \`POST /webhooks/nextcloud\` allows arbitrary vector data deletion when \`WEBHOOK\_SECRET\` is unset ( default ) (CVSS 9.1, cbcoutinho nextcloud-mcp-server · nextcloud-mcp-server)
- [CVE-2026-79785](https://cve.now/CVE-2026-79785.md): X-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloads (CVSS 8.2, CVHub520 X-AnyLabeling)
- [CVE-2026-55580](https://cve.now/CVE-2026-55580.md): mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist (CVSS 8.6, sonirico mcp-shell · github.com/sonirico/mcp-shell)
- [CVE-2026-55581](https://cve.now/CVE-2026-55581.md): mcp-shell: Secure Mode Allowlist Bypass via Default \`/bin/bash\` Executable (CVSS 8.4, sonirico mcp-shell · github.com/sonirico/mcp-shell)
- [CVE-2026-55582](https://cve.now/CVE-2026-55582.md): mcp-shell: Secure Mode Allowlist Bypass via Git Shell Alias (CVSS 8.4, sonirico mcp-shell · github.com/sonirico/mcp-shell)
- [CVE-2026-55546](https://cve.now/CVE-2026-55546.md): QWED-MCP: Unsafe SymPy \`parse\_expr()\` Remote Code Execution via Unsanitized Math Expression Input (CVSS 9.8, QWED-AI qwed-mcp · qwed-mcp)
- [CVE-2026-70550](https://cve.now/CVE-2026-70550.md): Potential unauthorized access to private Composer repository metadata in JFrog Artifactory (CVSS 6.5, jfrog artifactory)
- [CVE-2026-55536](https://cve.now/CVE-2026-55536.md): Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92) (CVSS 9.1, MervinPraison PraisonAI · praisonai)
- [CVE-2026-55532](https://cve.now/CVE-2026-55532.md): PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP server (CVSS 7.6, MervinPraison PraisonAI · praisonai)
- [CVE-2026-70548](https://cve.now/CVE-2026-70548.md): SSRF In CocoaPods Via JFrog Artifactory External Dependency (CVSS 3.5, jfrog artifactory)
- [CVE-2026-79784](https://cve.now/CVE-2026-79784.md): Vocos through 0.1.0 Arbitrary Code Execution via Unrestricted class\_path in Model Configuration (CVSS 8.6, gemelo-ai vocos)
- [CVE-2026-79783](https://cve.now/CVE-2026-79783.md): rclone before 1.74.4 Privilege Escalation via setuid Metadata (CVSS 2.0, rclone · github.com/rclone/rclone)
- [CVE-2026-79782](https://cve.now/CVE-2026-79782.md): rclone before 1.74.4 Security Token Disclosure via HTTPS to HTTP Redirect (CVSS 9.3, rclone · github.com/rclone/rclone)
- [CVE-2026-79781](https://cve.now/CVE-2026-79781.md): rclone serve s3 Path Traversal via dot-dot object keys (CVSS 6.9, rclone · github.com/rclone/rclone)
- [CVE-2026-79780](https://cve.now/CVE-2026-79780.md): rclone before v1.75.0 Credential Exposure via S3 Redirect (CVSS 6.0, rclone · github.com/rclone/rclone)
- [CVE-2026-79779](https://cve.now/CVE-2026-79779.md): rclone before v1.75.0 WebDAV Credential Exposure via HTTPS-to-HTTP Redirect (CVSS 6.0, rclone · github.com/rclone/rclone)
- [CVE-2026-79778](https://cve.now/CVE-2026-79778.md): rclone before v1.75.0 Denial of Service via TUS nil-response panic (CVSS 6.0, rclone · github.com/rclone/rclone)
- [CVE-2026-79777](https://cve.now/CVE-2026-79777.md): rclone before v1.75.0 Information Disclosure via RC API (CVSS 5.1, rclone · github.com/rclone/rclone)
- [CVE-2026-79776](https://cve.now/CVE-2026-79776.md): rclone before 1.75.0 Authentication Bypass via pprof (CVSS 6.9, rclone)
- [CVE-2026-79775](https://cve.now/CVE-2026-79775.md): rclone Archive Backend SquashFS Parser Denial of Service (CVSS 7.1, rclone)
- [CVE-2026-79774](https://cve.now/CVE-2026-79774.md): Winter CMS before 1.2.13 Twig Sandbox Escape via SecurityPolicy (CVSS 9.3, wintercms winter · winter/wn-system-module)
- [CVE-2026-79773](https://cve.now/CVE-2026-79773.md): Winter CMS before 1.2.13 Local File Inclusion via JavaScript (CVSS 6.9, wintercms winter · winter/wn-system-module)
- [CVE-2026-79772](https://cve.now/CVE-2026-79772.md): Nokogiri before 1.19.1 Unchecked Return Value canonicalize (CVSS 6.9, sparklemotion nokogiri · nokogiri)
- [CVE-2026-79771](https://cve.now/CVE-2026-79771.md): Nokogiri before 1.19.3 Memory Leak via XSLT Transform (CVSS 6.9, sparklemotion nokogiri · nokogiri)
- [CVE-2026-79770](https://cve.now/CVE-2026-79770.md): Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer (CVSS 8.7, sparklemotion nokogiri · nokogiri)
- [CVE-2026-79769](https://cve.now/CVE-2026-79769.md): Nokogiri before 1.19.4 Invalid Memory Read via initialize\_copy\_with\_args (CVSS 8.7, sparklemotion nokogiri)
- [CVE-2026-79676](https://cve.now/CVE-2026-79676.md): NLTK before 3.10.3 Path Traversal via Symlink Bypass (CVSS 8.2, nltk)
- [CVE-2026-79675](https://cve.now/CVE-2026-79675.md): NLTK before 3.10.3 JVM Argument Injection via Per-Call Options (CVSS 9.3, nltk)
- [CVE-2026-79674](https://cve.now/CVE-2026-79674.md): NLTK 3.10.2 Path Traversal via corpus-reader constructors (CVSS 8.8, nltk)
- [CVE-2026-55533](https://cve.now/CVE-2026-55533.md): PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secret (CVSS 8.2, MervinPraison PraisonAI · praisonai)
- [CVE-2026-55539](https://cve.now/CVE-2026-55539.md): PraisonAI: \[Auth Bypass\] PraisonAI async Jobs API (\`/api/v1/runs\`) has no authentication — unauthenticated job execution, result theft, cancel and delete (CVSS 8.6, MervinPraison PraisonAI · praisonai)
- [CVE-2026-69104](https://cve.now/CVE-2026-69104.md): Potential unauthorized repository migration in JFrog Artifactory (CVSS 7.6, jfrog artifactory)
- [CVE-2026-55527](https://cve.now/CVE-2026-55527.md): PraisonAI: Arbitrary file write via unsanitized \`user\_id\` in \`FileMemory.\_\_init\_\_()\` — path traversal to any writable location (CVSS 7.1, MervinPraison PraisonAI · praisonaiagents)
- [CVE-2026-15310](https://cve.now/CVE-2026-15310.md): zipfile: bzip2/LZMA/Zstandard members decompress without a max\_length bound, defeating chunked-read memory limits (CVSS 2.1, Python Software Foundation CPython · libpython +2)
- [CVE-2026-70551](https://cve.now/CVE-2026-70551.md): Server-Side Request Forgery Via VCS remote download in JFrog Artifactory (CVSS 8.5, jfrog artifactory)
- [CVE-2026-55541](https://cve.now/CVE-2026-55541.md): PraisonAI: \`--api-key\` flag on \`praisonai serve\` is not properly enforced (CVSS 8.8, MervinPraison PraisonAI · praisonai)
- [CVE-2026-55535](https://cve.now/CVE-2026-55535.md): PraisonAI: Server-Side Request Forgery via DNS rebinding bypass in webhook\_url validation (CVSS 6.8, MervinPraison PraisonAI · praisonai)
- [CVE-2026-55537](https://cve.now/CVE-2026-55537.md): PraisonAI: Webhook SSRF via DNS fail-open in \`JobSubmitRequest.validate\_webhook\_url()\` — bypass of CVE-2026-40114 (CVSS 7.1, MervinPraison PraisonAI · praisonai)
- [CVE-2026-55538](https://cve.now/CVE-2026-55538.md): PraisonAI: \[Auth Bypass\] \`praisonai serve agents --api-key\` is silently ignored — agent-invocation routes (\`POST /agents\`, \`POST /agents/{agent\_name}\`) run unauthenticated (CVSS 7.3, MervinPraison PraisonAI · praisonai)
- [CVE-2026-55624](https://cve.now/CVE-2026-55624.md): MintyItanium Lost-Auction takes items like barrier blocks out from search GUI (CVSS 5.3, MintyItanium Lost-Auction)
- [CVE-2026-55540](https://cve.now/CVE-2026-55540.md): PraisonAI: \[Path Traversal\] agent tools escape the configured workspace via symlinks (CVSS 7.1, MervinPraison PraisonAI · praisonai)
- [CVE-2026-79717](https://cve.now/CVE-2026-79717.md): Galaxy\_ng: galaxy\_ng: blind ssrf via namespace avatar\_url with no private-address restriction (CVSS 6.4, Red Hat Ansible Automation Platform)
- [CVE-2026-55530](https://cve.now/CVE-2026-55530.md): PraisonAI: ast\_grep\_rewrite rewrites arbitrary files without the @require\_approval gate enforced on every sibling mutation tool (CVSS 6.1, MervinPraison PraisonAI · MervinPraison praisonaiagents +1)
- [CVE-2026-55534](https://cve.now/CVE-2026-55534.md): PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution (CVSS 8.6, MervinPraison PraisonAI · praisonai)
- [CVE-2026-55526](https://cve.now/CVE-2026-55526.md): PraisonAI: SSRF protection bypass in \`spider\_tools.\_host\_is\_blocked()\` via DNS-resolved hostnames (\`127.0.0.1.nip.io\`) (CVSS 8.5, MervinPraison PraisonAI · MervinPraison praisonaiagents +1)
- [CVE-2026-55531](https://cve.now/CVE-2026-55531.md): PraisonAI: Unauthenticated unbounded session accumulation in the PraisonAI MCP HTTP server (memory exhaustion; session TTL never enforced) (CVSS 6.5, MervinPraison PraisonAI · praisonai)
- [CVE-2026-55528](https://cve.now/CVE-2026-55528.md): praisonaiagents: AgentServer declares auth\_token but never enforces it on any route (CWE-862) (CVSS 8.2, MervinPraison PraisonAI · MervinPraison praisonaiagents +1)
- [CVE-2026-55529](https://cve.now/CVE-2026-55529.md): PraisonAI: Origin validation bypass in MCP HTTP Stream transport allows browser-mediated unauthenticated tool execution on local MCP server (CVSS 6.9, MervinPraison PraisonAI · praisonai)
- [CVE-2026-16286](https://cve.now/CVE-2026-16286.md): File Upload in TRTEK Software's Software Repository Management (CVSS 9.8, TRtek Technological Products Computer Software Hardware Ind…)
- [CVE-2026-16599](https://cve.now/CVE-2026-16599.md): Denial of Service in GNU wget (CVSS 5.1, GNU wget)
- [CVE-2026-55525](https://cve.now/CVE-2026-55525.md): PraisonAI: SSRF via redirect-following in praisonaiagents web\_crawl (CVSS 7.5, MervinPraison PraisonAI · MervinPraison praisonaiagents +1)
- [CVE-2026-79655](https://cve.now/CVE-2026-79655.md): Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write (CVSS 7.8, Red Hat Enterprise Linux)
- [CVE-2026-79623](https://cve.now/CVE-2026-79623.md): FishCodeTech Muteki Default Local Worker Backend settings.json os command injection (CVSS 5.3, FishCodeTech Muteki)
- [CVE-2026-79622](https://cve.now/CVE-2026-79622.md): dekdee adobe-xd-mcp file-access-from-request Endpoint xd-parser.ts path traversal (CVSS 6.9, dekdee adobe-xd-mcp)
- [CVE-2026-78581](https://cve.now/CVE-2026-78581.md): Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Data Modification in Kibana (CVSS 4.2, Elastic Kibana)
- [CVE-2026-75803](https://cve.now/CVE-2026-75803.md): AEAD Forgeries with Empty Ciphertext When Using EVP\_Cipher() (CVSS 9.1, OpenSSL)
- [CVE-2026-63076](https://cve.now/CVE-2026-63076.md): Invalid Pointer Dereference in CMP Server via Crafted protectionAlg (CVSS 7.5, OpenSSL)
- [CVE-2026-79406](https://cve.now/CVE-2026-79406.md): macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error (CVSS 5.3, macrozheng mall)
- [CVE-2026-63075](https://cve.now/CVE-2026-63075.md): QUIC ACK-only Packet Retention Can Cause Memory Exhaustion (CVSS 7.5, OpenSSL)
- [CVE-2026-63074](https://cve.now/CVE-2026-63074.md): CMP Indefinite Cache Growth of ExtraCerts (CVSS 5.9, OpenSSL)
- [CVE-2026-63073](https://cve.now/CVE-2026-63073.md): Untrusted Sender DN Used as Format String in CMP Response Validation (CVSS 9.8, OpenSSL)
- [CVE-2026-63072](https://cve.now/CVE-2026-63072.md): Heap Buffer Overflow in CMS Key Unwrapping (CVSS 7.5, OpenSSL)
- [CVE-2026-54874](https://cve.now/CVE-2026-54874.md): Excessive Memory Use Buffering DTLS Records for a Future Epoch (CVSS 7.5, OpenSSL)
- [CVE-2026-18798](https://cve.now/CVE-2026-18798.md): QUIC Server May Trigger Double Free When Processing INITIAL Packet (CVSS 7.5, OpenSSL)
- [CVE-2026-14457](https://cve.now/CVE-2026-14457.md): RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate (CVSS 7.5, OpenSSL)
- [CVE-2026-57863](https://cve.now/CVE-2026-57863.md): Crater Invoice 6.0.6 Path Traversal RCE via update/unzip endpoint (CVSS 8.7, crater-invoice-inc crater)
- [CVE-2026-77998](https://cve.now/CVE-2026-77998.md): Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO \< 11.0.2, SAML SP Single Sign On – Login with ADFS \< 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps \< 6.4 (CVSS 10.0, miniorange.com SAML SSO Free for Joomla extension for Jo… +5)
- [CVE-2026-78887](https://cve.now/CVE-2026-78887.md): liketrek TREK Journey Photo Proxy validateShareTokenForAsset authorization (CVSS 6.3, liketrek TREK)
- [CVE-2026-78886](https://cve.now/CVE-2026-78886.md): liketrek TREK Public Journey Photo Proxy journey-public.controller.ts path traversal (CVSS 6.3, liketrek TREK)
- [CVE-2026-78885](https://cve.now/CVE-2026-78885.md): liketrek TREK OIDC Service oidcService.ts findOrCreateUser improper authentication (CVSS 6.3, liketrek TREK)
- [CVE-2026-77997](https://cve.now/CVE-2026-77997.md): Joomla Extension - yootheme.com - Authenticated, privileged information disclosure about site modules YOOtheme Pro 1.0.0-5.0.40 (CVSS 5.1, yootheme.com YOOtheme Pro extension for Joomla)
- [CVE-2026-77996](https://cve.now/CVE-2026-77996.md): Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 (CVSS 7.5, yootheme.com YOOtheme Pro extension for Joomla)
- [CVE-2026-57910](https://cve.now/CVE-2026-57910.md): WatchGuard Agent improper authentication allows unauthenticated remote code execution (CVSS 9.3, WatchGuard Agent)
- [CVE-2026-57909](https://cve.now/CVE-2026-57909.md): WatchGuard Agent path traversal allows unauthenticated remote code execution (CVSS 9.4, WatchGuard Agent)
- [CVE-2026-79673](https://cve.now/CVE-2026-79673.md): Ech0 before 4.4.3 Scope Bypass via profile:read Token (CVSS 8.5, lin-snow Ech0 · github.com/lin-snow/ech0)
- [CVE-2026-79672](https://cve.now/CVE-2026-79672.md): Ech0 before 4.4.3 Authentication Bypass via Comment Panel (CVSS 7.0, lin-snow Ech0 · github.com/lin-snow/ech0)
- [CVE-2026-79671](https://cve.now/CVE-2026-79671.md): Ech0 before 4.4.3 SSRF via DNS Resolution Bypass (CVSS 5.1, lin-snow Ech0 · github.com/lin-snow/ech0)
- [CVE-2026-79670](https://cve.now/CVE-2026-79670.md): Ech0 before 4.4.3 Stored XSS via SVG Upload (CVSS 4.8, lin-snow Ech0 · github.com/lin-snow/ech0)
- [CVE-2026-79669](https://cve.now/CVE-2026-79669.md): Ech0 before 4.4.3 Missing Authorization on System Logs (CVSS 5.3, lin-snow Ech0 · github.com/lin-snow/ech0)
- [CVE-2026-79668](https://cve.now/CVE-2026-79668.md): Ech0 before 4.7.3 Unauthenticated Like Endpoint Metric Inflation (CVSS 6.9, lin-snow Ech0 · github.com/lin-snow/ech0)
- [CVE-2026-79667](https://cve.now/CVE-2026-79667.md): Ech0 before 4.4.3 Authentication Bypass via Scope Enforcement (CVSS 7.2, lin-snow Ech0 · github.com/lin-snow/ech0)
- [CVE-2026-79666](https://cve.now/CVE-2026-79666.md): Ech0 before 4.4.3 Missing Authorization via dashboard log endpoints (CVSS 7.1, lin-snow Ech0 · github.com/lin-snow/ech0)
- [CVE-2026-79665](https://cve.now/CVE-2026-79665.md): Ech0 before 4.5.1 Authorization Bypass via Session Tokens (CVSS 8.7, lin-snow Ech0)
- [CVE-2026-79664](https://cve.now/CVE-2026-79664.md): Ech0 before 4.7.3 Access Token Revocation Bypass (CVSS 9.1, lin-snow Ech0 · github.com/lin-snow/ech0)
- [CVE-2026-79663](https://cve.now/CVE-2026-79663.md): Ech0 before 4.7.3 Stored XSS via RSS feed tag names (CVSS 4.8, lin-snow Ech0 · github.com/lin-snow/ech0)
- [CVE-2026-79662](https://cve.now/CVE-2026-79662.md): Ech0 before 4.7.3 OAuth Redirect URI Validation Bypass (CVSS 8.8, lin-snow Ech0 · github.com/lin-snow/Ech0)
- [CVE-2026-79661](https://cve.now/CVE-2026-79661.md): Ech0 before 4.7.3 Unauthenticated fav\_count Modification (CVSS 6.9, lin-snow Ech0 · github.com/lin-snow/ech0)
- [CVE-2026-79660](https://cve.now/CVE-2026-79660.md): Ech0 before 4.7.3 Email Disclosure via Public API (CVSS 6.9, lin-snow Ech0 · github.com/lin-snow/Ech0)
- [CVE-2026-79659](https://cve.now/CVE-2026-79659.md): Ech0 before 4.7.3 Server-Side Request Forgery via fetchPeerConnectInfo (CVSS 8.3, lin-snow Ech0 · github.com/lin-snow/ech0)
- [CVE-2026-79658](https://cve.now/CVE-2026-79658.md): Ech0 before 5.0.1 Denial of Service via Accept-Language (CVSS 8.7, lin-snow Ech0)
- [CVE-2026-79657](https://cve.now/CVE-2026-79657.md): NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization (CVSS 9.3, nltk)
- [CVE-2026-78684](https://cve.now/CVE-2026-78684.md): vLLM before 0.27.0 Denial of Service via DeepStream Backend (CVSS 6.9, vllm-project vllm · vllm)
- [CVE-2026-78864](https://cve.now/CVE-2026-78864.md): liketrek TREK Journey Entry Update journey.controller.t journeyService.updateEntry sql injection (CVSS 5.3, liketrek TREK)
- [CVE-2026-77824](https://cve.now/CVE-2026-77824.md): Media Sweep \<= 1.1.3 - Authenticated (Administrator+) SQL Injection via 'fields' Parameter (CVSS 4.9, wpcreatix Media Sweep – WordPress Media Cleaner)
- [CVE-2026-18547](https://cve.now/CVE-2026-18547.md): Ultimate Member \<= 2.12.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Textarea Profile Field with HTML Support (DOM Gadget via id Attribute) (CVSS 6.4, ultimatemember Ultimate Member – User Profile, Registration…)
- [CVE-2026-17587](https://cve.now/CVE-2026-17587.md): My Agile Privacy® \<= 3.3.6 - Missing Authorization to Unauthenticated Plugin Settings Modification via map\_missing\_cookie\_shield / map\_check\_consent\_mode\_status AJAX Actions (CVSS 5.3, formulaagile My Agile Privacy® – CMP, Cookie Consent & Priv…)
- [CVE-2026-75971](https://cve.now/CVE-2026-75971.md): ShopEngine Elementor WooCommerce Builder Addon \<= 4.9.4 - Authenticated (Shop Manager+) Privilege Escalation to WXR Import '\<wp\_option\>' Nodes (CVSS 7.2, roxnor ShopEngine Elementor WooCommerce Builder Addon – All…)
- [CVE-2026-19949](https://cve.now/CVE-2026-19949.md): All-in-One WP Migration and Backup \<= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution (CVSS 8.8, servmask All-in-One WP Migration and Backup)
- [CVE-2026-75908](https://cve.now/CVE-2026-75908.md): Newsletters \<= 4.17 - Missing Authorization to Authenticated (Author+) Arbitrary Modification via 'newsletters\_mailinglistsroles' POST Parameter (CVSS 4.3, contrid Newsletters)
- [CVE-2026-79652](https://cve.now/CVE-2026-79652.md): Keycloak-services: keycloak-services: jwt bearer authorization grant does not enforce consentrequired (CVSS 5.9, Red Hat build of Keycloak · Red Hat Single Sign-On)
- [CVE-2026-59335](https://cve.now/CVE-2026-59335.md): Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromise (CVSS 8.7, Cloud Foundry UAA · Cloud Foundry cf-deployment)
- [CVE-2026-78863](https://cve.now/CVE-2026-78863.md): liketrek TREK Pre-2FA mfa\_token authService.ts loginUser improper authentication (CVSS 5.3, liketrek TREK)
- [CVE-2026-12600](https://cve.now/CVE-2026-12600.md): Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder (CVSS 8.7, Poppler Innodata Labs)
- [CVE-2026-21754](https://cve.now/CVE-2026-21754.md): HCL Hive is affected by multiple security vulnerabilities. (CVSS 5.4, HCL Software Hive)
- [CVE-2026-21753](https://cve.now/CVE-2026-21753.md): HCL Hive is affected by multiple security vulnerabilities. (CVSS 4.2, HCL Software Hive)
- [CVE-2026-21758](https://cve.now/CVE-2026-21758.md): HCL Hive is affected by multiple security vulnerabilities. (CVSS 3.7, HCL Software Hive)
- [CVE-2026-49845](https://cve.now/CVE-2026-49845.md): Apache Hive: SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL paths (CVSS 9.8, Apache Software Foundation Apache Hive)
- [CVE-2026-55976](https://cve.now/CVE-2026-55976.md): Apache Hive: SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url (CVSS 9.1, Apache Software Foundation Apache Hive)
- [CVE-2026-53561](https://cve.now/CVE-2026-53561.md): Apache Hive: Unauthenticated authentication bypass in HiveServer2 HTTP SAML bearer-token validation allows impersonation of any Hive user (CVSS 7.4, Apache Software Foundation Apache Hive)
- [CVE-2026-75038](https://cve.now/CVE-2026-75038.md): Predictable temporary file in /tmp allows symlink attack in LACT (CVSS 6.1, ilya-zlobintsev LACT)
- [CVE-2026-16231](https://cve.now/CVE-2026-16231.md): hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass (CVSS 8.1, hbs)
- [CVE-2026-49050](https://cve.now/CVE-2026-49050.md): Apache DolphinScheduler: General user can mint admin access tokens via /access-tokens (CVSS 8.8, Apache Software Foundation Apache DolphinScheduler)
- [CVE-2026-75037](https://cve.now/CVE-2026-75037.md): Polkit authentication bypass in LACT (CVSS 7.0, ilya-zlobintsev LACT)
- [CVE-2026-76128](https://cve.now/CVE-2026-76128.md): eCommerce Product Catalog \<= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute (CVSS 6.4, implecode eCommerce Product Catalog)
- [CVE-2026-12878](https://cve.now/CVE-2026-12878.md): In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions. (CVSS 8.6, Octopus Deploy Codefresh)
- [CVE-2026-56092](https://cve.now/CVE-2026-56092.md): Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr) (CVSS 7.6, Extension "Apache Solr for TYPO3 - Enterprise Search")
- [CVE-2026-56093](https://cve.now/CVE-2026-56093.md): Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr) (CVSS 6.3, Extension "Apache Solr for TYPO3 - Enterprise Search")
- [CVE-2026-56094](https://cve.now/CVE-2026-56094.md): Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr) (CVSS 6.3, Extension "Apache Solr for TYPO3 - Enterprise Search")
- [CVE-2026-56095](https://cve.now/CVE-2026-56095.md): Insecure Deserialization in extension "Apache Solr for TYPO3 - Enterprise Search" (solr) (CVSS 7.7, Extension "Apache Solr for TYPO3 - Enterprise Search")
- [CVE-2026-56096](https://cve.now/CVE-2026-56096.md): Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr) (CVSS 6.3, Extension "Apache Solr for TYPO3 - Enterprise Search")
- [CVE-2026-77127](https://cve.now/CVE-2026-77127.md): Information Disclosure in extension "Modules" (modules) (CVSS 6.0, TYPO3 Extension "Modules")
- [CVE-2026-77128](https://cve.now/CVE-2026-77128.md): Broken Access Control in extension "Event management and registration" (sf\_event\_mgt) (CVSS 6.3, TYPO3 Extension "Event management and registration")
- [CVE-2026-77129](https://cve.now/CVE-2026-77129.md): Server-Side Template Injection in extension "Event management and registration" (sf\_event\_mgt) (CVSS 7.7, TYPO3 Extension "Event management and registration")
- [CVE-2026-77130](https://cve.now/CVE-2026-77130.md): Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy) (CVSS 5.3, Extension "SYSSY - TYPO3 Monitoring & Security Checks")
- [CVE-2026-77131](https://cve.now/CVE-2026-77131.md): Cleartext Transmission of Sensitive Information in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy) (CVSS 5.3, Extension "SYSSY - TYPO3 Monitoring & Security Checks")
- [CVE-2026-77133](https://cve.now/CVE-2026-77133.md): Broken Access Control in extension "femanager" (femanager) (CVSS 6.0, TYPO3 Extension "femanager")
- [CVE-2026-77134](https://cve.now/CVE-2026-77134.md): Broken Access Control in extension "femanager" (femanager) (CVSS 8.3, TYPO3 Extension "femanager")
- [CVE-2026-77135](https://cve.now/CVE-2026-77135.md): Information Disclosure in extension "femanager" (femanager) (CVSS 8.2, TYPO3 Extension "femanager")
- [CVE-2026-77136](https://cve.now/CVE-2026-77136.md): Server-Side Template Injection in extension "powermail" (powermail) (CVSS 9.5, TYPO3 Extension "powermail")
- [CVE-2026-77137](https://cve.now/CVE-2026-77137.md): SQL Injection in extension "Forms Export" (frp\_form\_answers) (CVSS 7.7, TYPO3 Extension "Forms Export")
- [CVE-2026-77138](https://cve.now/CVE-2026-77138.md): Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer\_powermail) (CVSS 9.3, TYPO3 Extension "HTML5 Video Player vs. Powermail")
- [CVE-2026-77139](https://cve.now/CVE-2026-77139.md): Path Traversal in extension "Mask" (mask) (CVSS 6.0, TYPO3 Extension "Mask")
- [CVE-2026-77140](https://cve.now/CVE-2026-77140.md): Broken Access Control in extension "Telephone Directory" (telephonedirectory) (CVSS 8.7, TYPO3 Extension "Telephone Directory")
- [CVE-2026-77141](https://cve.now/CVE-2026-77141.md): Broken Access Control in extension "Club Directory" (clubdirectory) (CVSS 8.8, TYPO3 Extension "Club Directory")
- [CVE-2026-77142](https://cve.now/CVE-2026-77142.md): Broken Access Control in extension "Industry Directory" (yellowpages2) (CVSS 8.8, TYPO3 Extension "Industry Directory")
- [CVE-2026-77143](https://cve.now/CVE-2026-77143.md): Broken Access Control in extension "Forum" (pforum) (CVSS 8.8, TYPO3 Extension "Forum")
- [CVE-2026-77144](https://cve.now/CVE-2026-77144.md): Broken Access Control in extension "Events 2" (events2) (CVSS 7.1, TYPO3 Extension "Events 2")
- [CVE-2026-77145](https://cve.now/CVE-2026-77145.md): Broken Access Control in extension "Events 2" (events2) (CVSS 7.1, TYPO3 Extension "Events 2")
- [CVE-2026-77146](https://cve.now/CVE-2026-77146.md): Broken Access Control in extension "femanager" (femanager) (CVSS 8.3, TYPO3 Extension "femanager")
- [CVE-2026-63587](https://cve.now/CVE-2026-63587.md): SMS Password Authorization Bypass via Failed Attempt Counter (CVSS 8.8, Weidmueller Interface IE-SR-2TX-WL-4G-EU · Weidmueller Inte…)
- [CVE-2026-63586](https://cve.now/CVE-2026-63586.md): Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface (CVSS 9.3, Weidmueller Interface IE-SR-2TX-WL · Weidmueller Interfa… +1)
- [CVE-2026-17548](https://cve.now/CVE-2026-17548.md): Missing authorization for viewing background jobs (CVSS 5.3, Checkmk)
- [CVE-2026-65633](https://cve.now/CVE-2026-65633.md): Purpose-limited JWT accepted as full bearer authentication in AshAuthentication (CVSS 7.6, team-alembic ash\_authentication)
- [CVE-2026-66882](https://cve.now/CVE-2026-66882.md): Reflected XSS in AshAuthentication confirmation and magic link interaction forms (CVSS 2.1, team-alembic ash\_authentication)
- [CVE-2026-19851](https://cve.now/CVE-2026-19851.md): Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 (CVSS 7.7, Dassault Systèmes Tuleap Enterprise Edition)
- [CVE-2026-59769](https://cve.now/CVE-2026-59769.md): FA-50 all versions contain hard-coded credentials. (CVSS 9.1, FURUNO ELECTRIC CO. FA-50)
- [CVE-2026-67578](https://cve.now/CVE-2026-67578.md): FA-50 all versions miss authentication for some configuration. (CVSS 7.5, FURUNO ELECTRIC CO. FA-50)
- [CVE-2026-18512](https://cve.now/CVE-2026-18512.md): TranslatePress \<= 3.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Approved Comment Body in Translation Editor (CVSS 6.4, cozmoslabs TranslatePress – Translate Multilingual sites wi…)
- [CVE-2026-18328](https://cve.now/CVE-2026-18328.md): Forminator Forms \<= 1.57.0 - Unauthenticated DOM-Based Cross-Site Scripting via 'error\_description' Parameter (CVSS 7.2, wpmudev Forminator Forms – Contact Form, Payment Form & Cus…)
- [CVE-2026-18100](https://cve.now/CVE-2026-18100.md): MetForm \<= 4.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mf\_form\_id' Widget Setting (CVSS 6.4, roxnor MetForm – Contact Form, Survey, Quiz, Conditional Fo…)
- [CVE-2026-18323](https://cve.now/CVE-2026-18323.md): Forminator Forms \<= 1.57.0.2 - Unauthenticated Stored Cross-Site Scripting via Radio Field (Save and Continue Draft) (CVSS 7.2, wpmudev Forminator Forms – Contact Form, Payment Form & Cus…)
- [CVE-2026-16601](https://cve.now/CVE-2026-16601.md): CM Map Locations \<= 2.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via cmloc\_route\_image\_upload AJAX Action (CVSS 8.8, creativemindssolutions CM Map Locations – Visualize and sha…)
- [CVE-2026-78701](https://cve.now/CVE-2026-78701.md): 389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos (CVSS 6.5, Red Hat Enterprise Linux · Red Hat Directory Server)
- [CVE-2026-78322](https://cve.now/CVE-2026-78322.md): File-roller: file-roller: stack buffer overflow in parse\_progress\_line for 7z and rar handlers (CVSS 6.5, Red Hat Enterprise Linux)
- [CVE-2026-68959](https://cve.now/CVE-2026-68959.md): SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. (CVSS 8.5, Sky Co. SKYSEA Client View · Sky Co. SKYMEC IT Manager)
- [CVE-2026-68062](https://cve.now/CVE-2026-68062.md): SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. (CVSS 8.5, Sky Co. SKYSEA Client View · Sky Co. SKYMEC IT Manager)
- [CVE-2026-66109](https://cve.now/CVE-2026-66109.md): A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. (CVSS 7.8, Sky Co. SKYSEA Client View · Sky Co. SKYMEC IT Manager)
- [CVE-2026-68960](https://cve.now/CVE-2026-68960.md): A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. (CVSS 8.5, Sky Co. SKYSEA Client View · Sky Co. SKYMEC IT Manager)
- [CVE-2026-69665](https://cve.now/CVE-2026-69665.md): SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. (CVSS 7.8, Sky Co. SKYSEA Client View · Sky Co. SKYMEC IT Manager)
- [CVE-2026-78656](https://cve.now/CVE-2026-78656.md): itsourcecode Sales and Inventory System cust\_del.php sql injection (CVSS 5.3, itsourcecode Sales and Inventory System)
- [CVE-2026-78654](https://cve.now/CVE-2026-78654.md): cleverbrush framework/deep deepExtend.ts deepExtend prototype pollution (CVSS 6.9, cleverbrush framework · cleverbrush deep)
- [CVE-2026-78470](https://cve.now/CVE-2026-78470.md): WP Project Manager Pro \<= 4.0.1 - Authenticated (Subscriber+) SQL Injection (CVSS 6.5, wedevs WP Project Manager Pro)
- [CVE-2026-78478](https://cve.now/CVE-2026-78478.md): Måne \<= 1.7 - Unauthenticated Local File Inclusion (CVSS 8.1, Elated-Themes Mane)
- [CVE-2026-78638](https://cve.now/CVE-2026-78638.md): peerigon unzip-crx/unzip-crx-3 Archive Extraction index.js unzip path traversal (CVSS 4.8, peerigon unzip-crx · peerigon unzip-crx-3)
- [CVE-2026-78637](https://cve.now/CVE-2026-78637.md): Fdawgs node-poppler Argument Injection index.js pdfUnite argument injection (CVSS 6.9, Fdawgs node-poppler)
- [CVE-2026-13215](https://cve.now/CVE-2026-13215.md): Zephyr ext2 mount: unvalidated superblock block size causes out-of-bounds write from a crafted filesystem image (CVSS 6.8, zephyrproject zephyr)
- [CVE-2026-13214](https://cve.now/CVE-2026-13214.md): Stack buffer overflow in OCPP GetConfiguration key parsing (CVSS 9.8, zephyrproject zephyr)
- [CVE-2026-12561](https://cve.now/CVE-2026-12561.md): tagDiv Composer \<= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, tagDiv Composer)
- [CVE-2026-19943](https://cve.now/CVE-2026-19943.md): Gutenverse \<= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block Attribute (CVSS 6.4, jegstudio Gutenverse – WordPress Blocks, Page Builder & Sit…)
- [CVE-2026-14280](https://cve.now/CVE-2026-14280.md): Events Manager \<= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion via 'dbem\_data\[updates\]' Array Keys (CVSS 6.6, netweblogic Events Manager – Calendar, Bookings, Tickets, a…)
- [CVE-2026-17089](https://cve.now/CVE-2026-17089.md): Events Manager \<= 7.4.0.1 - Reflected Cross-Site Scripting via 'header\_format' Parameter (CVSS 6.1, netweblogic Events Manager – Calendar, Bookings, Tickets, a…)
- [CVE-2026-76063](https://cve.now/CVE-2026-76063.md): FundEngine \<= 1.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wfp\_featured\_video\_url' Parameter (CVSS 6.4, roxnor FundEngine – Donation and Crowdfunding Platform)
- [CVE-2026-19892](https://cve.now/CVE-2026-19892.md): InfusedWoo Pro \<= 5.1.18 - Authenticated (Subscriber+) Privilege Escalation via Password Reset Link Disclosure (CVSS 8.8, Infused Addons InfusedWoo Pro)
- [CVE-2026-75930](https://cve.now/CVE-2026-75930.md): FundEngine \<= 1.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'campaign\_post' Parameter (CVSS 4.3, roxnor FundEngine – Donation and Crowdfunding Platform)
- [CVE-2026-75019](https://cve.now/CVE-2026-75019.md): Cozy Blocks \<= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via cozyHoverEffect Block Attribute (CVSS 6.4, cozythemes Cozy Blocks – Page Builder for Gutenberg Editor…)
- [CVE-2025-9878](https://cve.now/CVE-2025-9878.md): Password Protect WordPress Lite \<= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, buildwps PPWP – Password Protect Pages)
- [CVE-2026-75982](https://cve.now/CVE-2026-75982.md): LearnPress \<= 4.4.4 - Missing Authorization to Authenticated (Editor+) Limited Option Update via 'field\_name' Parameter (CVSS 4.4, thimpress LearnPress – WordPress LMS Plugin for Create and…)
- [CVE-2026-10627](https://cve.now/CVE-2026-10627.md): Events Manager \<= 7.4.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'status', 'private', and 'private\_only' Parameters (CVSS 5.3, netweblogic Events Manager – Calendar, Bookings, Tickets, a…)
- [CVE-2026-78685](https://cve.now/CVE-2026-78685.md): Le-yan｜Medical Practice Management System - Remote Code Execution (CVSS 8.8, Le-yan Medical Practice Management System)
- [CVE-2026-78683](https://cve.now/CVE-2026-78683.md): NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization (CVSS 9.4, nltk)
- [CVE-2026-78682](https://cve.now/CVE-2026-78682.md): NLTK before 3.10.3 SSRF Protection Bypass via Proxy (CVSS 8.7, nltk)
- [CVE-2026-78681](https://cve.now/CVE-2026-78681.md): NLTK before 3.10.3 Entity Expansion DoS via ElementTree (CVSS 8.7, nltk)
- [CVE-2026-78680](https://cve.now/CVE-2026-78680.md): NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary (CVSS 8.5, nltk)
- [CVE-2026-78679](https://cve.now/CVE-2026-78679.md): GitPython before 3.1.59 Arbitrary File Read via TagReference.create (CVSS 7.1, gitpython-developers GitPython · gitpython)
- [CVE-2026-78678](https://cve.now/CVE-2026-78678.md): GitPython before 3.1.59 Arbitrary File Read via Repo.blame() (CVSS 7.1, gitpython-developers GitPython · gitpython)
- [CVE-2026-78677](https://cve.now/CVE-2026-78677.md): GitPython before 3.1.59 Path Traversal via separate-git-dir (CVSS 8.7, gitpython-developers GitPython · gitpython)
- [CVE-2026-78676](https://cve.now/CVE-2026-78676.md): GitPython before 3.1.59 Remote Code Execution via Config Injection (CVSS 9.3, gitpython-developers GitPython · gitpython)
- [CVE-2026-78675](https://cve.now/CVE-2026-78675.md): GitPython before 3.1.59 Local File Content Disclosure via .gitmodules (CVSS 8.6, gitpython-developers GitPython · gitpython)
- [CVE-2026-76846](https://cve.now/CVE-2026-76846.md): Grav before 2.0.16 Information Disclosure via Twig Sandbox (CVSS 8.7, getgrav grav · getgrav/grav)
- [CVE-2026-76839](https://cve.now/CVE-2026-76839.md): Grav before 2.0.16 Information Disclosure via offsetGet (CVSS 8.7, getgrav grav · getgrav/grav)
- [CVE-2026-75575](https://cve.now/CVE-2026-75575.md): Rocket.Chat Missing DDP Rate Limit on the sendForgotPasswordEmail Meteor Method (CVSS 6.9, RocketChat Rocket.Chat)
- [CVE-2026-75574](https://cve.now/CVE-2026-75574.md): Grav before 4.2.2 Remote Code Execution via Email Twig (CVSS 8.7, getgrav grav)
- [CVE-2026-72702](https://cve.now/CVE-2026-72702.md): Grav CMS before 2.0.16 Origin Validation Bypass via Referer (CVSS 9.3, getgrav grav · getgrav/grav)
- [CVE-2026-72701](https://cve.now/CVE-2026-72701.md): Grav CMS before 2.0.16 Timing Attack via verifyNonce (CVSS 6.3, getgrav grav · getgrav/grav)
- [CVE-2026-72700](https://cve.now/CVE-2026-72700.md): Grav before 3.9.1 Timing Attack via Non-Constant-Time Token Comparison (CVSS 8.7, getgrav grav)
- [CVE-2026-72699](https://cve.now/CVE-2026-72699.md): Grav Login Plugin before 3.9.1 Email Enumeration via Registration (CVSS 9.3, getgrav grav-plugin-login)
- [CVE-2026-72698](https://cve.now/CVE-2026-72698.md): Grav CMS before 2.0.16 Information Disclosure via Twig Sandbox Bypass (CVSS 7.1, getgrav grav · getgrav/grav)
- [CVE-2026-72697](https://cve.now/CVE-2026-72697.md): Grav CMS before 2.0.16 Path Traversal via media\_directory (CVSS 7.1, getgrav grav · getgrav/grav)
- [CVE-2026-72696](https://cve.now/CVE-2026-72696.md): Grav CMS before 2.0.16 Symlink Following via createLockFile (CVSS 8.6, getgrav grav)
- [CVE-2026-72695](https://cve.now/CVE-2026-72695.md): Grav before 2.0.16 Path Traversal via MediaUploadTrait deleteFile (CVSS 7.1, getgrav grav · getgrav/grav)
- [CVE-2026-56710](https://cve.now/CVE-2026-56710.md): Grav Login Plugin before 1.0.16 Privilege Escalation via Unlock (CVSS 9.3, getgrav grav)
- [CVE-2026-56709](https://cve.now/CVE-2026-56709.md): Grav before 3.9.2 Host Header Injection via sendInvitationEmail (CVSS 8.7, getgrav grav)
- [CVE-2026-56708](https://cve.now/CVE-2026-56708.md): Grav API Plugin before 1.0.16 SSRF via DNS Rebinding (CVSS 6.9, getgrav grav)
- [CVE-2026-56707](https://cve.now/CVE-2026-56707.md): Grav Flex Objects 1.4.0 through 1.4.7 Authorization Bypass via Shortcode (CVSS 8.3, getgrav grav)
- [CVE-2026-56706](https://cve.now/CVE-2026-56706.md): Adminer before 5.4.3 CSRF Token Secret Recovery via XOR Masking (CVSS 6.1, vrana adminer)
- [CVE-2026-56705](https://cve.now/CVE-2026-56705.md): Adminer before 5.4.3 Remote Code Execution via MSSQL PDO DSN Injection (CVSS 9.3, vrana adminer)
- [CVE-2026-56704](https://cve.now/CVE-2026-56704.md): Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String (CVSS 5.3, vrana adminer)
- [CVE-2026-56703](https://cve.now/CVE-2026-56703.md): Adminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTO (CVSS 8.6, vrana adminer)
- [CVE-2026-56702](https://cve.now/CVE-2026-56702.md): Adminer before 5.4.3 Unrestricted File Upload via AdminerFileUpload (CVSS 7.1, vrana adminer)
- [CVE-2026-34968](https://cve.now/CVE-2026-34968.md): Adminer before 5.4.3 Arbitrary File Deletion via SQLite Drop (CVSS 7.2, vrana adminer)
- [CVE-2026-34967](https://cve.now/CVE-2026-34967.md): Adminer sql-log Plugin 5.3.0 through 5.4.2 Arbitrary File Write (CVSS 5.3, vrana adminer)
- [CVE-2026-34964](https://cve.now/CVE-2026-34964.md): Adminer before 5.5.0 SSRF via PDO DSN Injection (CVSS 6.9, vrana adminer)
- [CVE-2026-34959](https://cve.now/CVE-2026-34959.md): Adminer before 5.5.0 Open Redirect via X-Forwarded-Prefix (CVSS 5.3, vrana adminer)
- [CVE-2026-16434](https://cve.now/CVE-2026-16434.md): Adminer before 5.5.1 X-Forwarded-Prefix Backslash Bypass (CVSS 2.3, vrana adminer)
- [CVE-2026-15023](https://cve.now/CVE-2026-15023.md): Events Manager \<= 7.4.0 - Authenticated (Contributor+) SQL Injection via 'meta\_key' Parameter in Event/Location Duplicate Action (CVSS 6.5, netweblogic Events Manager – Calendar, Bookings, Tickets, a…)
- [CVE-2026-19801](https://cve.now/CVE-2026-19801.md): BetterLinks \<= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Short URL Creation via create\_fbs\_link AJAX Action (CVSS 4.3, wpdevteam BetterLinks – Link Shortener, Link Cloaking, Redi…)
- [CVE-2026-10630](https://cve.now/CVE-2026-10630.md): WP Courses LMS \<= 3.2.29 - Insecure Direct Object Reference to Authenticated (Custom+) Sensitive Information Disclosure via 'resultID' Parameter (CVSS 4.3, hookandhook WP Courses LMS – Online Courses Builder, eLearn…)
- [CVE-2026-66766](https://cve.now/CVE-2026-66766.md): Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection) (CVSS 7.5, SAP\_SE SAP S/4HANA)
- [CVE-2026-59183](https://cve.now/CVE-2026-59183.md): OpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile Decoding (CVSS 5.5, AcademySoftwareFoundation openexr)
- [CVE-2026-55373](https://cve.now/CVE-2026-55373.md): OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT\_MAX sample counts (CVSS 6.2, AcademySoftwareFoundation openexr)
- [CVE-2026-55371](https://cve.now/CVE-2026-55371.md): OpenEXR: OpenEXRCore exr\_attr\_set\_bytes() accepts NULL type\_hint with positive hint\_length (CVSS 6.9, AcademySoftwareFoundation openexr)
- [CVE-2026-55059](https://cve.now/CVE-2026-55059.md): OpenEXR: OpenEXRUtil SampleCountChannel row setter heap has an out-of-bounds write vulnerability (CVSS 6.1, AcademySoftwareFoundation openexr)
- [CVE-2026-54920](https://cve.now/CVE-2026-54920.md): OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize (CVSS 0.0, AcademySoftwareFoundation openexr)
- [CVE-2026-38465](https://cve.now/CVE-2026-38465.md): A Stored XSS vulnerability in the donor avatar mouse-over text feature in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a48648 (CVSS 5.4)
- [CVE-2026-38466](https://cve.now/CVE-2026-38466.md): A Stored XSS vulnerability in the torrent remaster custom title feature in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864 (CVSS 5.4)
- [CVE-2026-38467](https://cve.now/CVE-2026-38467.md): A SQL injection vulnerability in the tags manager in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows re (CVSS 5.4)
- [CVE-2026-38468](https://cve.now/CVE-2026-38468.md): A SQL injection vulnerability in the country-code lookup endpoint in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18 (CVSS 4.3)
- [CVE-2026-38469](https://cve.now/CVE-2026-38469.md): A Stored XSS vulnerability in the custom bonus title feature in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d1844644 (CVSS 5.4)
- [CVE-2026-38470](https://cve.now/CVE-2026-38470.md): A Broken access control vulnerability in the API user endpoint in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446 (CVSS 4.3)
- [CVE-2026-38472](https://cve.now/CVE-2026-38472.md): A Stored XSS vulnerability in forum reward comments in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 allows (CVSS 6.1)
- [CVE-2026-38473](https://cve.now/CVE-2026-38473.md): A Stored XSS vulnerability in the subtitle deletion flow in GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 al (CVSS 5.4)
- [CVE-2026-38474](https://cve.now/CVE-2026-38474.md): GazellePW (GazellePosterWall) commit 86c4bedf727691b5a97af42a4864869d18446449 suffers from a Broken access control vulnerability in the IP l (CVSS 5.4)
- [CVE-2026-39113](https://cve.now/CVE-2026-39113.md): Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f10695 (CVSS 4.0)
- [CVE-2026-51368](https://cve.now/CVE-2026-51368.md): An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execut (CVSS 9.8)
- [CVE-2026-52489](https://cve.now/CVE-2026-52489.md): Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute arbitrary code via the svgNameT (CVSS 7.8)
- [CVE-2026-52491](https://cve.now/CVE-2026-52491.md): An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: (CVSS 8.4)
- [CVE-2026-75421](https://cve.now/CVE-2026-75421.md): aria2 \<=1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine() function. (CVSS 4.0)
- [CVE-2026-75465](https://cve.now/CVE-2026-75465.md): The /api.php/user/get\_list endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue. (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-08-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.